The vulnerability CVE-2025-69373 in beeteam368 VidoRev involves improper control of the filename parameter used in PHP include or require statements, which can lead to local file inclusion (LFI). This flaw affects VidoRev versions through 2.9.9.9.9.9.7. The CVSS 3.1 base score is 7.5, indicating a high severity with network attack vector, high attack complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability. No patch or remediation information is provided in the available data.

Successful exploitation could allow an attacker to include and execute local files on the server, potentially leading to disclosure of sensitive information, code execution, or denial of service. The CVSS score of 7.5 reflects a high impact on confidentiality, integrity, and availability. However, no known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to vulnerable endpoints and applying any recommended temporary mitigations from the vendor. Avoid exposing the affected application to untrusted users or networks where possible.