CVE-2024-25182

Critical

Published: 29/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

givanz VvvebJs 1.7.2 suffers from a file upload vulnerability via save.php, which may allow an attacker to upload dangerous files.

Potential for remote code execution or server compromise by exploiting the file upload vulnerability.

Update VvvebJs to the latest version or restrict access to save.php and implement file upload validation.

Original NVD description (English source)

givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php.