Vulnerability Details CVE-2025-60833
An XML External Entity (XXE) vulnerability in the /mall/wxpay/pay component of uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying crafted XML data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 17.6%
CVSS Severity
CVSS v3 Score 6.5
References
Products affected by CVE-2025-60833
-
cpe:2.3:a:ghostxbh:uzy-ssm-mall:1.1.0