CVE-2025-60784

The XiaozhangBang Voluntary Like System V8.8 is vulnerable to an improper access control flaw in the /topfirst.php Pay module. Due to insufficient server-side validation of the zhekou and zid parameters, remote attackers can send crafted HTTP POST requests to manipulate purchase costs. By setting...