kiboit PhastPress

• CVE-2026-3712 High 7.3 PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' Parameter 0.2%
• CVE-2025-14388 Critical 9.8 PhastPress <= 3.7 - Unauthenticated Arbitrary File Read via Null Byte Injection 0.5%