CVE-2025-2199

SQL injection vulnerability in the Innovacin y Cualificacin local administration plugin ajax.php. This vulnerability allows an attacker to obtain, update and delete data from the database by injecting an SQL query in searchActionsToUpdate, searchSpecialitiesPending, searchSpecialitiesLinked, searchUsersToUpdateProfile, training_action_data, showContinuingTrainingCourses and showUsersToEdit in /local/administration/ajax.php.