TI-2019-15492 CVE-2019-25439 · GHSA-2r55-mr9c-c89pNoviSmart CMS SQL Injection via Referer HTTP HeaderPriority HIGH 77NoviSmart CMS contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the Referer HTTP header field.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00302 · Published 2026-02-22 · No fix listed CWE-89