CVE-2025-15375

CVE-2025-15375 affects EyouCMS up to 1.7.7. The vulnerability is a deserialization flaw in the Ajax.php handler (function unserialize in file application/api/controller/Ajax.php, component arcpagelist) where manipulating the attstr argument can trigger deserialization. Impact is described as remo...