CVE-2025-49295

Summary

Path Traversal: '…/…//' vulnerability in Mikado-Themes MediClinic mediclinic allows PHP Local File Inclusion.This issue affects MediClinic: from n/a through <= 2.1.

Affected Software

VendorProductVersion RangeStatus
Mikado-ThemesMediClinic0 <= 2.1affected

Weaknesses

  • CWE-35: Path Traversal: '…/…//'

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References