CVE-2025-12248

High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A security vulnerability has been detected in CLTPHP 3.0. The affected element is an unknown function of the file /home/search.html. Such manipulation of the argument keyword leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Published 2025-10-27. Last modified 2026-06-17.