A vulnerability classified as critical was found in yangzongzhuan RuoYi up to 4.8.1. This impacts the function
filterKeyword of the file /com/ruoyi/common/utils/sql/SqlUtil.java of the component Blacklist Handler. The manipulation results in sql injection.
This vulnerability is cataloged as CVE-2025-10473. The attack may be launched remotely. Furthermore, there is an exploit available.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
