A vulnerability, which was classified as critical, has been found in CSZ CSZ-CMS up to 1.3.0. This affects an unknown function of the component Form Builder View. The manipulation of the argument Field leads to sql injection.
This vulnerability is traded as CVE-2025-63608. It is possible to initiate the attack remotely. There is no exploit available.
