Critical severity9.8NVD Advisory· Published Dec 11, 2025· Updated Jun 17, 2026
CVE-2025-65474
CVE-2025-65474
Description
An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to a SVG format.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<=2.8.6+ 1 more
- (no CPE)range: <=2.8.6
- (no CPE)
- cpe:2.3:a:easyimages2.0_project:easyimages2.0:*:*:*:*:*:*:*:*Range: <=2.8.6
Patches
Vulnerability mechanics
References
2- congsec.cnnvdExploitThird Party Advisory
- gist.github.com/CongSec/3cf968621f71a7da35dcc9b8f0b29bb2nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.