Security Advisory
CVE-2025-25224
7.5
HIGH
Vulnerability Description
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missing authentication vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained.
Published Date
February 18, 2025
Official Source
NIST NVD Advisory