A vulnerability, which was classified as critical, has been found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This issue affects the function
saveOrUpdate
of the file org/jeecgframework/web/cgform/controller/build/CgFormBuildController. java. The manipulation leads to sql injection.
The identification of this vulnerability is CVE-2025-0391. The attack may be initiated remotely. Furthermore, there is an exploit available.
It is recommended to upgrade the affected component.