CVE-2025-25761: Hkcms

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php.

Affected products

• Hkcms Hkcms: version 2.3.2.240702 only

Published 2025-02-27. Last modified 2026-06-17.