InPost Gallery, CVE-2025-57889

CVE, Research URL: CVE-2025-57889
Home page URL: Security reports for InPost Gallery
Application: InPost Gallery
Published on: Sep 05, 2025
Research Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RealMag777 InPost Gallery allows PHP Local File Inclusion. This issue affects InPost Gallery: from n/a through 2.1.4.5.
Affected versions: max 2.1.4.6.
Status: vulnerable