CVE-2025-28915

Summary

CVE-2025-28915 is a file upload vulnerability affecting ThemeEgg ToolKit from version n/a through 1.2.9. Hackers can exploit this vulnerability to upload a web shell, granting them unrestricted access to the web server. This poses a significant risk as web shells can be used for various malicious activities, such as data theft or unauthorized system modification. The vulnerability occurs due to insufficient input validation, allowing users to upload files of dangerous types. It is crucial for users to update ThemeEgg ToolKit to the latest version or consider alternative solutions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.