EUVD-2025-60574

Malicious code in bella-gado-gado14-sluey npm...

CVE-2025-60574

creationtimestamp| type| source ---|---|--- 2025-11-07 23:27:58+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m53a2wf6vyb2...

CVE-2025-60574

A Local File Inclusion LFI vulnerability has been identified in tQuadra CMS 4.2.1117. The issue exists in the "/styles/" path, which fails to properly sanitize user-supplied input. An attacker can exploit this by sending a crafted GET request to retrieve arbitrary files from the underlying system...