Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-67325
9.8
CRITICALCVSS v3
Published
January 8, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticated attackers to achieve remote code execution.
Qloapps/QloApps
GitHubQloApps is a Free and Open-source hotel management and reservation system to take a hotel business online. QloApps offers a Property Management System (PMS), a Booking Engine, and an attractive Hotel Website. Elevate hotel operations with QloApps to streamline processes and provide an enhanced experience for both hoteliers and guests.
GitHubQloApps is a Free and Open-source hotel management and reservation system to take a hotel business online. QloApps offers a Property Management System (PMS), a Booking Engine, and an attractive Hotel Website. Elevate hotel operations with QloApps to streamline processes and provide an enhanced experience for both hoteliers and guests.<= 1.7.0NVD