CVE-2025-68551

MediumCVSS 6.5

Published: 23/12/2025(UTC)Updated: 19/10/2026(UTC)Translated: 20/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vikas Ratudi VPSUForm v-form allows Retrieve Embedded Sensitive Data. This issue affects VPSUForm from n/a through <= 3.2.24.

Risk Assessment

Sensitive data embedded in the system may be exposed, potentially facilitating further attacks or breaching information confidentiality.

Recommendation

Update the VPSUForm plugin to a version later than 3.2.24 or remove it if no fix is available, and review the configuration for embedded sensitive data.

Other vulnerabilities in VPSUForm

CVE-2025-58957Medium
Missing Authorization vulnerability in VPSUForm (versions up to 3.2.20) allows exploiting incorrectly configured access control security levels.

Original NVD description (English source)

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vikas Ratudi VPSUForm v-form allows Retrieve Embedded Sensitive Data.This issue affects VPSUForm: from n/a through <= 3.2.24.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS