CVE-2025-22364

Name of the Vulnerable Software and Affected Versions Ach Invoice App versions 1.0.1 and earlier

Description The issue is related to improper control of filenames for Include/Require statements in PHP, allowing PHP Local File Inclusion. This problem affects the Service Shogun Ach Invoice App, enabling the inclusion of local PHP files.

Recommendations For versions 1.0.1 and earlier, update to a version that fixes the improper control of filenames for Include/Require statements to prevent PHP Local File Inclusion. As a temporary workaround, consider restricting access to vulnerable include/require statements until a patch is available.