Skip to content
Sign in
7.5 High

CVE-2024-38735 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through <= 5.9.5.

Affected products and versions

Product Affected versions Fixed in
Event post 5.9 earliest → 5.9.5 No fix stated
event_post 5.9 earliest → 5.9.5 No fix stated
Event post 5.9 earliest → 5.9.5 No fix stated

Other CVEs of Event post

The 3 CVEs of Event post →
CVE-2025-24585 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event… 6.5 Medium CVE-2023-49179 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in N.O.U.S 6.5 Medium
Track this CVE