CVE-2025-45753

7.2 highEPSS 0.5%

High (7.2) in vtiger vtiger crm. EPSS 0.5% chance of exploitation in the next 30 days.

A vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the ZIP import functionality in the Module Import feature.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2025-05-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vtiger:vtiger_crm

References

https://www.simonjuguna.com/cve-2025-45753-authenticated-remote-code-execution-vulnerability-in-vtiger-open-source-edition-v8-3-0/

Check your stack JSON