CVE-2025-28888
NONE—CVSS v3
—CVSS v2
0.55%
EPSS (exploit probability)
CWE-98CWE
Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme GiftXtore bw-giftxtore allows PHP Local File Inclusion.This issue affects GiftXtore: from n/a through < 1.7.7.
Affected routers (0)
No routers currently mapped to this CVE in our database.