A vulnerability categorized as critical has been discovered in CLTPHP 3.0. The affected element is an unknown function of the file /home/search.html. Such manipulation of the argument keyword leads to sql injection.

This vulnerability is listed as CVE-2025-12248. The attack may be performed from remote. In addition, an exploit is available.