A vulnerability identified as critical has been detected in pilus PilusCart 1.4.1 . Affected by this issue is some unknown functionality of the component Comment Submission Endpoint . Performing a manipulation of the argument send results in sql injection. This vulnerability is known as CVE-2019-25672 . Remote exploitation of the attack is possible. Furthermore, an exploit is available.