The vulnerability CVE-2025-52732 affects RealMag777 GMap Targeting versions up to 1.1.6 and arises from improper control of the filename used in PHP include or require statements. This leads to a PHP Local File Inclusion issue, which can be exploited by an attacker with low privileges to include unintended files on the server, potentially resulting in remote code execution or disclosure of sensitive information. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to full compromise of the affected system, including unauthorized disclosure of sensitive data, modification of data, and disruption of service. The high CVSS score reflects the critical impact on confidentiality, integrity, and availability. However, no known exploits are reported in the wild as of the publication date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application and limit privileges of users interacting with it to reduce risk.