CVE-2022-27257: Hubzilla

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A PHP Local File Inclusion vulneraility in the default Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter.

Affected products

• Hubzilla Hubzilla: before 7.2 (fixed in 7.2)

Published 2022-04-15. Last modified 2026-06-17.