CVE-2025-63724

Medium · 6.0

CVSS

6.0

EPSS

0.3%

Published

Nov 14, 2025

CISA due date

—

The record

SQL injection (SQL-i) vulnerability in SVX Portal 2.7A via crafted POST request to admin/update_setings.php.

Ecosystem	Package	Introduced	Fixed