A vulnerability was found in SiempreCMS up to 1.3.6. It has been classified as critical. This affects an unknown part of the file user_search_ajax.php. This manipulation of the argument name/userName causes sql injection.
This vulnerability appears as CVE-2025-10115. The attack may be initiated remotely. In addition, an exploit is available.
