CVE-2025-63994
CVE-2025-63994 affects RichFilemanager v2.7.6. The vulnerability is in the /php/UploadHandler.php component and allows an attacker to upload a crafted file, enabling arbitrary code execution. Reported base metrics indicate a critical CVSS v3.1 score (9.8; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Red...