The vulnerability CVE-2025-60047 affects axiomthemes IPharm versions up to 1.2.3. It is caused by improper validation or control of filenames used in PHP include or require statements, which leads to a PHP Local File Inclusion vulnerability. This flaw allows an attacker to include local files on the server, potentially exposing sensitive information or enabling code execution. The CVSS v3.1 base score is 8.1, indicating high severity with network attack vector, high impact on confidentiality, integrity, and availability, and no privileges or user interaction required. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability can lead to disclosure of sensitive files, unauthorized code execution, and full compromise of the affected system's confidentiality, integrity, and availability. Given the high CVSS score and the nature of the vulnerability, the impact is significant for any system running vulnerable versions of IPharm.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting access to vulnerable PHP include/require functionality or applying manual code review and hardening to prevent local file inclusion. Monitor vendor channels for updates and patches.