A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been declared as critical. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection.

This vulnerability was named CVE-2025-14939. The attack may be performed from remote. In addition, an exploit is available.