VULNERABILITY INTELLIGENCE

CVE-2026-48972

CVSS score7.5 HIGH

EPSS probability0.31%

CISA KEVNot currently listed

Published2026-05-27

Last modified2026-10-26

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SeedProd LLC SeedProd Pro allows PHP Local File Inclusion. This issue affects SeedProd Pro: from n/a before 6.19.5.