CVE-2025-59473
Unknown Unknown - Not Provided
SQL Injection in Structure Admin Module Allows Data Manipulation

Publication date: 2026-01-26

Last updated on: 2026-02-13

Assigner: HackerOne

Description
SQL Injection vulnerability in the Structure for Admin authenticated user
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-26
Last Modified
2026-02-13
Generated
2026-06-16
AI Q&A
2026-01-27
EPSS Evaluated
2026-06-15
NVD
CVE-2025-59473
EUVD
EUVD-2025-206332
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
expressionengine expressionengine From 7.0.0 (inc) to 7.5.14 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a SQL Injection issue that affects the Structure for Admin component when accessed by an authenticated user. It allows an attacker with admin privileges to inject malicious SQL code into the system.

Impact Analysis

The vulnerability can lead to unauthorized access or manipulation of the database, potentially resulting in data disclosure (confidentiality impact), data modification (integrity impact), and disruption of service (availability impact).

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-59473. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart