CVE-2025-7575 Zavy86 WikiDocs submit.php image_delete_ajax path traversal

A vulnerability has been found in Zavy86 WikiDocs up to 1.0.77 and classified as critical. Affected by this vulnerability is the function imagedropuploadajax/imagedeleteajax of the file submit.php. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version...

CVE-2025-7575

CVE-2025-7575 affects Zavy86 WikiDocs up to version 1.0.77. The vulnerability lies in the image_drop_upload_ajax and image_delete_ajax functions in submit.php, enabling path traversal. The issue can be exploited remotely and may impact confidentiality, integrity, and availability as described in ...

CVE-2025-7575: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in Zavy86 WikiDocs up to 1.0.77 and classified as critical. Affected by this vulnerability is the function imagedropuploadajax/imagedeleteajax of the file submit.php. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version...