Skip to main content
Radar
DashboardThreatsMapFeedsAPI
reconnecting

CVE-2025-3703: CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') in wipeoutmedia CSS & JavaScript Toolbox

High
VulnerabilityCVE-2025-3703cvecve-2025-3703cwe-98
Published: Thu Aug 14 2025 (08/14/2025, 10:34:37 UTC)
Source: CVE Database V5
Vendor/Project: wipeoutmedia
Product: CSS & JavaScript Toolbox

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wipeoutmedia CSS & JavaScript Toolbox allows PHP Local File Inclusion. This issue affects CSS & JavaScript Toolbox: from n/a through n/a.

Technical Details

Data Version
5.1
Assigner Short Name
Patchstack
Date Reserved
2025-04-16T06:27:39.093Z
Cvss Version
3.1
State
PUBLISHED

Threat ID: 689dbee1ad5a09ad0059e599

Added to database: 8/14/2025, 10:48:01 AM

Last updated: 8/14/2025, 10:48:01 AM

Views: 1

Related Threats

CVE-2025-8957: SQL Injection in Campcodes Online Flight Booking Management System

Medium
VulnerabilityThu Aug 14 2025

CVE-2025-54707: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in RealMag777 MDTF

Critical
VulnerabilityThu Aug 14 2025

CVE-2025-54706: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Noor Alam Magical Posts Display

Medium
VulnerabilityThu Aug 14 2025

CVE-2025-54705: CWE-862 Missing Authorization in magepeopleteam WpEvently

Medium
VulnerabilityThu Aug 14 2025

CVE-2025-54704: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in hashthemes Easy Elementor Addons

Medium
VulnerabilityThu Aug 14 2025

Actions

Please log in to the Console to use AI analysis features.

Need enhanced features?

Contact root@offseq.com for Pro access with improved analysis and higher rate limits.

Latest Threats