
PivotX 3.0.0 RC3 – Remote Code Execution (RCE)
# Exploit Title: PivotX v3.0.0 RC3 – Stored XSS to Remote Code Execution (RCE) # Date: July 2025 # Exploit Author: HayToN # Vendor Homepage: https://github.com/pivotx # Software Link: https://github.com/pivotx/PivotX # Version: 3.0.0 RC3 # Tested on: Debian 11, PHP 7.4 # CVE : CVE-2025-52367 ## Vulnerability Type: Stored Cross-Site Scripting (XSS) in the…