← Database

CVE-2025-25379

CRITICAL CVSS: 9.6 Published: 2025-02-28 Modified: 2026-06-17

Description

Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component.

Affected Platforms

07Fly 07Flycms

Weakness Type

CWE-352

References