The Clearblue® Ovulation Calculator up to version 1.2.4 contains a vulnerability classified as CVE-2025-60196, where improper validation of filenames in PHP include or require statements allows local file inclusion. This can enable attackers to execute arbitrary code or access sensitive files on the server. The vulnerability is remotely exploitable over the network but requires user interaction and has a high attack complexity. The CVSS 3.1 vector indicates network attack vector, high complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to full compromise of the affected system, including unauthorized access to sensitive data, modification or deletion of files, and potential execution of arbitrary code. This impacts confidentiality, integrity, and availability of the Clearblue® Ovulation Calculator environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected application and monitor for suspicious activity. Avoid exposing the vulnerable application to untrusted networks and users. Do not rely on generic mitigations unless specifically recommended by the vendor.