CVE-2025-3554

A vulnerability was found in phpshe 1.8. It has been rated as problematic. This issue affects some unknown processing of the file api.php?mod=cron=buyer. The manipulation of the argument act leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2025-3554

creationtimestamp| type| source ---|---|--- 2025-04-14 06:50:18+00:00| seen| https://bsky.app/profile/potato.software/post/3lmqxvko7qj2t 2025-04-14 06:53:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11581 2025-04-14 10:28:50+00:00| seen| https://t.me/cvedetector/228...

CVE-2025-3554

Phpshe 1.8 is affected by CVE-2025-3554 due to improper handling of the act parameter in api.php?mod=cron&act=buyer, which enables cross-site scripting. The vulnerability is exploitable remotely. The PT-2025-16207 advisory confirms the issue and suggests remediation: restrict access to the api.ph...