CVE-2025-63334

The control panel software PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 is vulnerable to unauthenticated remote code execution (RCE) . The flaw exists in the submit_opacity.php component, where the application fails to sanitize user input provided in the opacityValue POST parameter before passing...