Content Management System CVEs and Security Vulnerabilities

CVE-2025-7713

Reflected XSS in Global Medya's PHP CMS

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows XSS Through HTTP Headers. This issue affects Content Management System (CMS): through 21072025.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Global Interactive Design Media Software Globalmedya

Products

Content Management System Content Management System

CVE-2025-7714

Time Based SQLi in Global Medya's PHP CMS

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection. This issue affects Content Management System (CMS): through 21072025.