VULNERABILITY INTELLIGENCE

CVE-2025-49372

CVSS score10 CRITICAL

EPSS probability0.48%

CISA KEVNot currently listed

Published2025-11-06

Last modified2026-10-18

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Remote Code Inclusion.This issue affects HAPPY: from n/a through <= 1.0.7.