CVE-2025-14780: Xiongwei Smart Catering Cloud Platform

Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability was detected in Xiongwei Smart Catering Cloud Platform 2.1.6446.28761. The affected element is an unknown function of the file /dishtrade/dish_trade_detail_get. The manipulation of the argument filter results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.

Affected products

• Xiongwei Smart Catering Cloud Platform: version 2.1.6446.28761 only

Published 2025-12-16. Last modified 2026-06-17.