CVE-2025-45326

Description

An issue in PocketVJ CP PocketVJ-CP-v3 pvj 3.9.1 allows remote attackers to execute arbitrary code via the submit_size.php component.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/magdesign/PocketVJ-CP-v3/releases/tag/release ↗
• https://gist.github.com/mamdouhalrekabi-ops/3e230eb973101aa6ac7003427a723e29 ↗