CVE Catalog
CVE-2025-60218
CriticalCVSS 9.9Summary
In PT Luxa Addons versions up to 1.2.2, there is a vulnerability that allows subscribers to upload arbitrary files.
Risk Assessment
An attacker could exploit this vulnerability to upload malicious software, potentially compromising the system.
Recommendation
It is recommended to upgrade to the latest version of PT Luxa Addons to mitigate this vulnerability.
Original NVD description (English source)
Subscriber Arbitrary File Upload in PT Luxa Addons <= 1.2.2 versions.