CVE-2025-45753

—

CVSS 3.1

7.2 high

EPSS

<1%p38

Published

May 21, 2025 (May 21, 2025)

Modified

Jun 17, 2026

Description

A vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the ZIP import functionality in the Module Import feature.

Vendors: vtiger
Products: vtiger crm
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.