CVE-2025-4260: ZHANGYANBO2007 Youkefu

High severity, CVSS 8.3. EPSS: 0.7% chance of exploitation in the next 30 days.

A vulnerability was found in zhangyanbo2007 youkefu up to 4.2.0 and classified as problematic. Affected by this issue is the function impsave of the file m\web\handler\admin\system\TemplateController.java. The manipulation of the argument dataFile leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

• ZHANGYANBO2007 Youkefu: version 4.2.0 only

Published 2025-05-05. Last modified 2026-06-17.