CVE-2025-50707

A security vulnerability in thinkphp3 v.3.2.5 allows a remote attacker to execute arbitrary code via the index.php component. The root cause is a crafted template inclusion that requires no authentication from the attacker. Practical consequences include unauthorized code execution on the target ...