CVE-2025-45326

An issue in PocketVJ CP PocketVJ-CP-v3 pvj 3.9.1 allows remote attackers to execute arbitrary code via the submit_size.php component. The root cause is identified as CWE-77 (Improper Neutralization of Special Elements used in a Command). At this time, there is no information regarding a newer ver...