High severity7.5NVD Advisory· Published Feb 20, 2025· Updated Jun 17, 2026

CVE-2025-22973

Description

An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the http_curl() function in the '/application/common. php' file that directly retrieves the URL request response content.

Affected products

Qibosoft/QiboCMScpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: X1.0
Qibosoft/Qibocms X1
cpe:2.3:a:qibosoft:qibocms_x1:-:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/202110420106/CVE/blob/master/CVE-2025-22973.mdnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000