CVE-2025-14780 | Xiongwei Smart Catering Cloud Platform 2.1.6446.28761 dish_trade_detail_get filter sql injection

A vulnerability was found in Xiongwei Smart Catering Cloud Platform 2.1.6446.28761 and classified as critical. The affected element is an unknown function of the file /dishtrade/dish_trade_detail_get. The manipulation of the argument filter results in sql injection.

This vulnerability is identified as CVE-2025-14780. The attack can be executed remotely. Additionally, an exploit exists.