CVE-2025-28009: Appventure Dietiqa

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A SQL Injection vulnerability exists in the `u` parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20.

Affected products

• Appventure Dietiqa: version 1.0.20 only

Published 2025-04-17. Last modified 2026-06-17.