High severity7.2NVD Advisory· Published May 21, 2025· Updated Jun 17, 2026

CVE-2025-45753

Description

A vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the ZIP import functionality in the Module Import feature.

Affected products

Vtiger/CRM Open Source Editiondescription
Vtiger/vTigerllm-fuzzy
Range: =8.3.0

Patches

Vulnerability mechanics

References

www.simonjuguna.com/cve-2025-45753-authenticated-remote-code-execution-vulnerability-in-vtiger-open-source-edition-v8-3-0/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000