Vulnerability · Published Aug 3, 2025 · Assigned by VulDB

CVE-2025-8505495300897 wx-shop cross-site request forgery

Medium 4.3

In plain English

A medium-severity cross-site request forgery in wx-shop from 495300897. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.2%top 86.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in 495300897 wx-shop up to de1b66331368695779cfc6e4d11a64caddf8716e and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

Affected products (as reported)

Vendor	Product	Versions
495300897	wx-shop	de1b66331368695779cfc6e4d11a64caddf8716e

Weakness: CWE-352, CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

References

VDB-318604 | 495300897 wx-shop cross-site request forgery vdb-entry
VDB-318604 | CTI Indicators (IOB, IOC) signature, permissions-required
Submit #627322 | Gitee 495300897 wx-shop wise-net-web 1.0 Cross-Site Request Forgery third-party-advisory
https://github.com/Bemcliu/cve-reports/blob/main/cve-08-wx-shop-CSRF/readme.md exploit