Skip to content
OpenAdvisories

Product · BeWelcome

Rox

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2025-34292

    BeWelcome/Rox PHP Object Injection RCE

    Rox, the software running BeWelcome, contains a PHP object injection vulnerability resulting from deserialization of untrusted data. User-controlled input is passed to PHP's unserialize(): the POST parameter `formkit_memory_recovery` in \\RoxPostHandler::getC…

    BeWelcome Rox