Unrated severityNVD Advisory· Published Nov 7, 2025· Updated Nov 10, 2025
CVE-2025-60574
CVE-2025-60574
Description
A Local File Inclusion (LFI) vulnerability has been identified in tQuadra CMS 4.2.1117. The issue exists in the "/styles/" path, which fails to properly sanitize user-supplied input. An attacker can exploit this by sending a crafted GET request to retrieve arbitrary files from the underlying system.
Affected products
2- tQuadra/tQuadra CMSdescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
News mentions
0No linked articles in our index yet.