CVE-2025-8506 | THREATINT

Description

A vulnerability was found in 495300897 wx-shop up to de1b66331368695779cfc6e4d11a64caddf8716e and classified as problematic. This issue affects some unknown processing of the file /user/editUI. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.

Eine problematische Schwachstelle wurde in 495300897 wx-shop bis de1b66331368695779cfc6e4d11a64caddf8716e gefunden. Davon betroffen ist unbekannter Code der Datei /user/editUI. Dank Manipulation mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung. Dieses Produkt setzt Rolling Releases ein. Aus diesem Grund sind Details zu betroffenen oder zu aktualisierende Versionen nicht verfügbar.

Reserved 2025-08-02 | Published 2025-08-03 | Updated 2025-08-03 | Assigner VulDB

MEDIUM: 5.1CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

LOW: 3.5CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

LOW: 3.5CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

4.0AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR

Problem types

Cross Site Scripting

Code Injection

Product status

de1b66331368695779cfc6e4d11a64caddf8716e

affected

Timeline

2025-08-02:	Advisory disclosed
2025-08-02:	VulDB entry created
2025-08-02:	VulDB entry last update

Credits

HJAQiang (VulDB User) reporter

References

vuldb.com/?id.318605 (VDB-318605 | 495300897 wx-shop editUI cross site scripting) vdb-entry

vuldb.com/?ctiid.318605 (VDB-318605 | CTI Indicators (IOB, IOC, TTP, IOA)) signature permissions-required

vuldb.com/?submit.627323 (Submit #627323 | Gitee 495300897 wx-shop wise-net-web 1.0 Cross Site Scripting) third-party-advisory

github.com/.../blob/main/cve-07-wx-shop-Stored XSS/readme.md exploit

cve.org (CVE-2025-8506)

nvd.nist.gov (CVE-2025-8506)

Download JSON