CVE-2025-8121: Widzialni Pad CMS

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability.

Affected products

• Widzialni Pad CMS: up to and including 1.2.1

Published 2025-09-30. Last modified 2026-06-17.