A vulnerability was found in slackero phpwcms up to 1.9.45/1.10.8. It has been declared as critical. This vulnerability affects unknown code of the file include/inc_module/mod_feedimport/inc/processing.inc.php of the component Feedimport Module. The manipulation of the argument cnt_text leads to deserialization.

This vulnerability was named CVE-2025-5497. The attack can be initiated remotely. Furthermore, there is an exploit available.

It is recommended to upgrade the affected component.