CVE-2026-48972
Deferred Deferred - Pending Action
PHP Local File Inclusion in SeedProd Pro

Publication date: 2026-05-27

Last updated on: 2026-05-27

Assigner: Patchstack

Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SeedProd LLC SeedProd Pro allows PHP Local File Inclusion. This issue affects SeedProd Pro: from n/a before 6.19.5.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-27
Last Modified
2026-05-27
Generated
2026-05-27
EPSS Evaluated
N/A
NVD
CVE-2026-48972
EUVD
EUVD-2026-32498
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
seedprod seedprod_pro to 6.19.5 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-98 The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Attack-Flow Graph
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart