CVE-2025-7939

The CVE-2025-7939 entry concerns jerryshensjf JPACookieShop 蛋糕商城JPA版 1.0. The issue is in the addGoods function of GoodsController.java, where input handling allows unrestricted file uploads. This allows remote exploitation as described across multiple sources (NVD, Red Hat, CVE list, PT Security...