CVE-2025-67325

Description

Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticated attackers to achieve remote code execution.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://github.com/Qloapps/QloApps Product
• https://github.com/mr7s3d0/CVE-2025-67325 ExploitThird Party Advisory