CVE-2025-12626

CVE-2025-12626 affects jeecgboot jeewx-boot prior to 641ab52c3e1845fec39996d7794c33fb40dad1dd, specifically the getImgUrl function in WxActGoldeneggsPrizesController.java. The vulnerability arises from path traversal via manipulation of the imgurl argument, enabling remote exploitation. Public ex...