CVE-2025-67325

🚨 Unauthenticated Remote Code Execution RCE via File Upload 📌 Overview Project: QloApps Repository: https://github.com/Qloapps/QloApps Affected Versions: = 1.7.0 Vulnerability Class: Unauthenticated Remote Code Execution Severity: Critical CVSS v3.1: Critical 9.8...

CVE-2025-67325

Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticated attackers to achieve remote code execution...

CVE-2025-67325

CVE-2025-67325 is an unrestricted file upload vulnerability in QloApps, affecting version 1.7.0 and earlier within the hotel review feature. The issue allows remote unauthenticated attackers to achieve remote code execution (RCE). Public advisories corroborate the RCE potential; evidence of a PoC...