TI-2018-15405 CVE-2018-25180 · GHSA-86q7-q8m5-6pgcMaitra 1.7.2 SQL Injection and Database File DownloadPriority HIGH 70Maitra 1.7.2 contains an sql injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the mailid parameter in outmail and inmail modules.CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00221 · Published 2026-03-06 · No fix listed CWE-89