Is CVE-2025-71428 being exploited?

No public exploit is currently tracked.

How severe is CVE-2025-71428?

CVE-2025-71428 has a CVSS v3 severity of MEDIUM (4.9).

Back

CVE-2025-71428

Description

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents, including other accounts' password hashes.