CVE-2025-32573: Kiotviet Sync

High severity, CVSS 8.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kiotviet KiotViet Sync allows SQL Injection. This issue affects KiotViet Sync: from n/a through 1.8.3.

Affected products

• Kiotviet Kiotviet Sync: up to and including 1.8.3

Published 2025-04-17. Last modified 2026-06-17.