CVE-2025-60833 | uzy-ssm-mall 1.1.0 XML /mall/wxpay/pay xml external entity reference

October 8, 2025 Yanac

A vulnerability labeled as problematic has been found in uzy-ssm-mall 1.1.0. Affected by this vulnerability is an unknown functionality of the file /mall/wxpay/pay of the component XML Handler. The manipulation results in xml external entity reference.

This vulnerability is cataloged as CVE-2025-60833. The attack must originate from the local network. There is no exploit available.VulDB Recent EntriesRead More