This vulnerability, identified as CVE-2025-52744, involves improper control of code generation in the Inpersttion For Theme product, leading to a code injection flaw. The issue affects all versions up to 1.0. The CVSS 3.1 base score of 7.7 reflects a high severity with network-based exploitation requiring low privileges but high attack complexity. The vulnerability impacts confidentiality (high), integrity (low), and availability (low). No official patch or vendor advisory is provided, and no known exploits have been reported.

Successful exploitation could allow an attacker to inject code remotely, potentially leading to unauthorized disclosure of information (high confidentiality impact), partial integrity compromise, and limited availability disruption. The attack requires low privileges but has high complexity, reducing the likelihood of widespread exploitation without specialized conditions. There are no known active exploits at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for vendor updates and apply any official patches once available. Until then, consider limiting exposure of the affected product to untrusted networks and review configurations to minimize risk.