CVE-2025-54019 describes a code injection vulnerability in the Beplusthemes Alone product affecting versions before 7.8.5. The issue stems from improper control over code generation, which could allow an attacker to inject code. The CVSS 3.1 base score is 6.5 (medium), with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability at a low level. No patch or vendor advisory information is currently available, and the product is not a cloud service.

Successful exploitation of this vulnerability could allow an attacker to inject code, potentially leading to partial loss of confidentiality, integrity, and availability of the affected system. The medium CVSS score indicates moderate risk, but no known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor vendor communications for updates. No specific mitigations are provided in the available data.