CVE-2025-30091P2CRITICALCVSS 9.4fixed in 4.0.02025-03-25
CVE-2025-30091 [CRITICAL] CWE-96 CVE-2025-30091: In Tiny MoxieManager PHP before 4.0.0, remote code execution can occur in the installer command. Thi
In Tiny MoxieManager PHP before 4.0.0, remote code execution can occur in the installer command. This vulnerability allows unauthenticated attackers to inject and execute arbitrary code. Attacker-controlled data to InstallCommand can be inserted into config.php, and InstallCommand is available after an installation has completed.
nvd