CVE-2025-63334 | PocketVJ CP PocketVJ-CP-v3 pvj 3.9.1 POST Parameter submit_opacity.php opacityValue os command injection

November 5, 2025 Yanac

A vulnerability categorized as critical has been discovered in PocketVJ CP PocketVJ-CP-v3 pvj 3.9.1. Affected by this issue is some unknown functionality of the file submit_opacity.php of the component POST Parameter Handler. The manipulation of the argument opacityValue results in os command injection.

This vulnerability is reported as CVE-2025-63334. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More