CVE-2025-10233

Name of the Vulnerable Software and Affected Versions: kalcaddle kodbox version 1.61

Description: A security issue has been identified in kalcaddle kodbox. The fileGet/fileSave function within the app/controller/explorer/editor.class.php file is susceptible to path traversal due to manipulation of the path argument. This issue can be exploited remotely. The exploit has been publicly disclosed.

Recommendations: As a temporary workaround, consider restricting access to the fileGet and fileSave functions within the app/controller/explorer/editor.class.php file until a patch is available.