Security Advisory

CVE-2025-60833

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-08 00:00:00
Last updated 2025-10-08 15:47:22
Assigner mitre
State PUBLISHED

Description

An XML External Entity (XXE) vulnerability in the /mall/wxpay/pay component of uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying crafted XML data.