TI-2019-15526 CVE-2019-25473 · GHSA-445w-9cr4-95h8Clinic Pro SQL Injection via monthly_expense_overview month ParameterPriority MEDIUM 64Clinic Pro contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the month parameter.CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00375 · Published 2026-03-12 · No fix listed CWE-89