PT-2025-29425

CVE-2025-7575

·

Published

2025-07-14

·

Updated

2025-07-14

Description by

CVSS 2.0
5.8
Medium
MetricsAV:N/AC:L/Au:M/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Zavy86 WikiDocs versions through 1.0.77
Description: A critical issue exists in Zavy86 WikiDocs that allows for path traversal. The vulnerability is located in the image drop upload ajax/image delete ajax function within the submit.php file. The attack can be initiated remotely.
Recommendations: Upgrade to version 1.0.78.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2025-7575
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com