CVE-2025-30524: Origincode Product Catalog

Critical severity, CVSS 9.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in origincode Product Catalog displayproduct allows SQL Injection.This issue affects Product Catalog: from n/a through <= 1.0.4.

Affected products

• Origincode Product Catalog: up to and including 1.0.4

Published 2025-03-26. Last modified 2026-06-17.