A vulnerability labeled as critical has been found in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /index.php. Such manipulation of the argument keywords leads to sql injection.

This vulnerability is documented as CVE-2025-12237. The attack can be executed remotely. Additionally, an exploit exists.