References https://cve.imfht.com/poc_detail/7fa5df9caa76dbe75842fbb7c0ffe51bc1ebcd78?lang=en https://www.cnvd.org.cn/flaw/show/CNVD-2025-27311 https://www.nsfocus.net/vulndb/124718 https://cve.imfht.com/detail/CVE-2025-7461 https://cve.imfht.com/detail/CVE-2025-7461?lang=en https://www.sentinelone.com/vulnerability-database/cve-2025-7461/ https://www.cve.org/CVERecord?id=CVE-2025-7461 https://nvd.nist.gov/vuln/detail/CVE-2025-7461 https://www.cvedetails.com/cve/CVE-2025-7461/ https://vuldb.com/submit/610055
Related VulnerabilitiesmotionEye /action/1/snapshot 权限绕过漏洞(CVE-2026-55863)itC 中心管理服务器 /user/actionUser.do;abcdjoin.do 信息泄露漏洞CKAN /api/action/datastore_search_sql SQL 注入漏洞(CVE-2026-42031)PoCCVE-2026-32583: Webnus Inc. Modern Events Calendar - Broken Access ControlPoCCVE-2021-4448: Kaswara Modern VC Addons <= 3.0.1 - Missing Authorizationlsfusion /eval/action 命令执行漏洞PoC西软云XMS /FoxhisFileServer/action 文件读取漏洞PoCCVE-2021-24145: WordPress Modern Events Calendar Lite <5.16.5 - Authenticated Arbitrary File UploadPoCCVE-2021-24146: WordPress Modern Events Calendar Lite <5.16.5 - Sensitive Information DisclosurePoCCVE-2021-24284: WordPress Kaswara Modern VC Addons <=3.0.1 - Arbitrary File UploadPoCCVE-2021-24946: WordPress Modern Events Calendar <6.1.5 - Blind SQL Injection