Question: What is CVE-2025-23938?
Answer: CVE-2025-23938 is a vulnerability classified as high with a CVSS score of 7.5. It falls under CWE-98 and affects the system as follows: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NotFound Image Gallery Box by CRUDLab allows PHP Local File Inclusion. This issue affects Image Gallery Box by CRUDLab: from n/a through 1.0.3.