A vulnerability classified as critical was found in EyouCMS up to 1.7.7. Impacted is the function
saveRemote of the file application/function.php. Such manipulation leads to server-side request forgery.
This vulnerability is referenced as CVE-2025-15373. It is possible to launch the attack remotely. Furthermore, an exploit is available.
The vendor is “[a]cknowledging the existence of the vulnerability, we have completed the fix and will release a new version, v1.7.8”.
