CVE-2025-7898: Codecanyon iDentSoft Account Setting Page updateSetting unrestricted upload

Severity: high (CVSS 7.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-07-20 · updated 2026-06-17
Weakness: CWE-284

Description

A vulnerability was found in Codecanyon iDentSoft 2.0. It has been classified as critical. This affects an unknown part of the file /clinica/profile/updateSetting of the component Account Setting Page. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Codecanyon iDentSoft: 2.0

References

https://vuldb.com/?ctiid.317013
https://vuldb.com/?id.317013
https://vuldb.com/?submit.609578
https://www.youtube.com/watch?v=jsWOCSWs7gs
https://www.youtube.com/watch?v=jsWOCSWs7gs

Get alerted when CVE-2025-7898 or the next vulnerability affects your stack