Security Advisory
CVE-2025-25223
5.3
MEDIUM
Vulnerability Description
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a path traversal vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained.
Published Date
February 18, 2025
Official Source
NIST NVD Advisory