CVE-2022-27256: Hubzilla

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter.

Affected products

• Hubzilla Hubzilla: before 7.2 (fixed in 7.2)

Published 2022-04-13. Last modified 2026-06-17.