High severity7.5NVD Advisory· Published Jan 8, 2026· Updated Jun 17, 2026
CVE-2026-22521
CVE-2026-22521
Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in G5Theme Handmade Framework handmade-framework allows PHP Local File Inclusion.This issue affects Handmade Framework: from n/a through <= 3.9.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=3.9+ 1 more
- (no CPE)range: <=3.9
- (no CPE)range: <=3.9
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.