CVE-2025-45326

Description

An issue in PocketVJ CP PocketVJ-CP-v3 pvj 3.9.1 allows remote attackers to execute arbitrary code via the submit_size.php component.

Affected Platforms

Weakness Type

CWE-77

References

• https://gist.github.com/mamdouhalrekabi-ops/3e230eb973101aa6ac7003427a723e29
• https://github.com/magdesign/PocketVJ-CP-v3/releases/tag/release