CVE-2025-58955

Publication date

2025-10-22 14:32:34

Family

Patchstack

State

PUBLISHED

Description

Improper Control of Filename for Include/Require Statement in PHP Program (PHP Remote File Inclusion) vulnerability in designervily Karzo karzo allows PHP Local File Inclusion.This issue affects Karzo: from n/a through < 2.6.