7.5
CVSSv3

CVE-2025-26889

CVSSv4: NA | CVSSv3: 7.5 | CVSSv2: NA | VMScore: 850 | EPSS: 0.00114 | KEV: Not Included
Published: 15/04/2025 Updated: 15/04/2025

Vulnerability Summary

PHP Local File Inclusion Vulnerability in NotFound hockeydata LOS

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NotFound hockeydata LOS allows PHP Local File Inclusion. This issue affects hockeydata LOS: from n/a up to and including 1.2.4.