CVE-2025-1213

Summary

CVE-2025-1213 is a newly identified vulnerability affecting PiHome version 1.77. This issue, rated as problematic, impacts an unspecified functionality of the /index.php file. An attacker can exploit this cross-site scripting (XSS) vulnerability by manipulating the $_SERVER['PHP_SELF'] argument. The exploit can be launched remotely, and the details have been made public, increasing the risk of potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.