CVE-2025-67325

creationtimestamp| type| source ---|---|--- 2026-01-08 19:51:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwqxzpsrf27 2026-01-08 20:36:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbwtihaakn22...

CVE-2025-67325

CVE-2025-67325 is an unrestricted file upload vulnerability in QloApps, affecting version 1.7.0 and earlier within the hotel review feature. The issue allows remote unauthenticated attackers to achieve remote code execution (RCE). Public advisories corroborate the RCE potential; evidence of a PoC...

CVE-2025-67325

Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticated attackers to achieve remote code execution...