A vulnerability labeled as critical has been found in Simple ERP up to 6.30@a04.2. Impacted is an unknown function of the component Warehouse Document Filtering Form. The manipulation results in sql injection.

This vulnerability is identified as CVE-2025-9339. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.