A vulnerability was found in dayrui XunRuiCMS 4.6.3. It has been classified as critical. Affected is the function
import_add of the file dayrui/Fcms/Control/Admin/Linkage.php. The manipulation leads to deserialization.
This vulnerability is traded as CVE-2025-1177. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
