CVE-2025-61505

The e107 CMS (versions ≤ 2.3.3 ) is vulnerable to insecure deserialization (CWE-502) within the install.php script. The vulnerability exists because the script processes user-controlled input from the previous_steps POST parameter using unserialize(base64_decode()) without proper validation or re...