CVE-2025-30055

The “system” function receives untrusted input from the user. If the “EnableJSCaching” option is enabled, it is possible to execute arbitrary code provided as the “Module” parameter.

More information : https://cert.pl/en/posts/2025/08/CVE-2025-2313/