critical9.8
CVE-2025-67325
Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticated attackers to achieve remote code execu…
Impact
Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticated attackers to achieve remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webkul | Qloapps | through 1.7.0 |