CVE-2025-67325

Publication date

2026-01-08 00:00:00

Family

mitre

State

PUBLISHED

Description

Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticated attackers to achieve remote code execution.