8.1
CVSSv3

CVE-2025-22656

CVSSv4: NA | CVSSv3: 8.1 | CVSSv2: NA | VMScore: 910 | EPSS: 0.00155 | KEV: Not Included
Published: 18/02/2025 Updated: 18/02/2025

Vulnerability Summary

PHP Local File Inclusion Vulnerability in Cookie Monster Through Version 1.2.2

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Oscar Alvarez Cookie Monster allows PHP Local File Inclusion. This issue affects Cookie Monster: from n/a up to and including 1.2.2.

Vulnerable Product Search on Vulmon Subscribe to Product

oscar alvarez cookie monster