Question: What is CVE-2025-25224?
Answer: CVE-2025-25224 is a vulnerability classified as medium with a CVSS score of 5.3. It falls under CWE-306 and affects the system as follows: The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missing authentication vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained.