Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wind Media E-Commerce Website Template allows SQL Injection.
CVSS 3.1HIGH 8.6·Network·No auth·No interaction·EPSS 0.0031·Published 2025-03-04·Fixed in v1.5CWE-89