CVE-2025-15375 - EyouCMS arcpagelist Ajax.php unserialize deserialization

CVE ID : CVE-2025-15375 Published : Dec. 31, 2025, 5:16 a.m. | 1 hour, 43 minutes ago Description : A flaw has been found in EyouCMS up to 1.7.7. The impacted element is the function unserialize of the file application/api/controller/Ajax.php of the component arcpagelist Handler. Executing manipulation of the argument attstr can lead to deserialization. The attack can be launched remotely. The exploit has been published and may be used. The vendor is

Source: Telegram CVE Monitor