CVE-2025-3703

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wipeoutmedia CSS & JavaScript Toolbox css-javascript-toolbox allows PHP Local File Inclusion.This issue affects CSS & JavaScript Toolbox: from n/a through 12.0.3...

CVE-2025-3703

The CVE-2025-3703 entry documents a Local File Inclusion (LFI) flaw in the WordPress plugin CSS & JavaScript Toolbox, caused by improper handling of include/require filename handling in PHP. Affects the plugin’s WordPress installation (CSS & JavaScript Toolbox) with versions prior to 12.0.3. CVSS...