A vulnerability classified as critical was found in Pro3W CMS up to 1.2.0. This affects an unknown function. The manipulation results in sql injection.

This vulnerability is known as CVE-2025-15498. It is possible to launch the attack remotely. No exploit is available.