Description
An arbitrary file upload vulnerability in the component \controller\LocalTemplate.php of FoxCMS v1.2.5 allows attackers to execute arbitrary code via uploading a crafted Zip file.
Critical · 9.8
CVE-2025-25790
EUVD-2025-5357GHSA-cj6v-75jc-4vmf
An arbitrary file upload vulnerability in the component \controller\LocalTemplate.php of FoxCMS v1.2.5 allows attackers to execute arbitrar…
Published Feb 26, 2025 · Updated Jul 5, 2026 · Assigned by mitre