CVE-2021-42325: Froxlor

Critical severity, CVSS 9.8. EPSS: 11.8% chance of exploitation in the next 30 days.

Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name.

Affected products

• Froxlor Froxlor: before 0.10.30 (fixed in 0.10.30)

Published 2021-10-12. Last modified 2026-06-17.