CVE-2025-25379 Information

Description

Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component.

Reference

https://github.com/R2og/Sun-jialiang/tree/main/9/readme.md