CVE-2025-7714: Globalmedya Content Management System

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection. This issue affects Content Management System (CMS): through 21072025.

Affected products

• Globalmedya Content Management System: up to and including 2025-07-21

Published 2026-01-29. Last modified 2026-06-17.