CVE-2025-8750: macrozheng mall Add Product Page upload cross site scripting
A vulnerability has been found in macrozheng mall up to 1.0.3 and classified as problematic. Affected by this vulnerability is the function Upload of the file /minio/upload of the component Add Product Page. The manipulation of the argument File leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8750?
CVE-2025-8750 is classified as problematic due to its exploitation potential leading to cross-site scripting.
How do I fix CVE-2025-8750?
To fix CVE-2025-8750, upgrade the macrozheng mall software to version 1.0.4 or later.
Which versions are affected by CVE-2025-8750?
CVE-2025-8750 affects macrozheng mall versions up to and including 1.0.3.
What component is impacted by CVE-2025-8750?
CVE-2025-8750 impacts the Add Product Page in the Upload function.
What type of attack does CVE-2025-8750 allow?
CVE-2025-8750 allows attackers to perform cross-site scripting attacks through manipulation of the File argument.