Wangmarket

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-15415 MEDIUM POC This Month

A vulnerability has been found in xnx3 wangmarket up to 6.4. The impacted element is the function uploadImage of the file /sits/uploadImage.do of the component XML File Handler. [CVSS 4.7 MEDIUM]

File Upload Authentication Bypass Wangmarket

NVD GitHub VulDB

CVSS 3.1

4.7

EPSS

0.0%

CVE-2025-25770 MEDIUM POC This Month

Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /agency/AgencyUserController.java. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CSRF Wangmarket

NVD

CVSS 3.1

6.8

EPSS

0.0%

CVE-2025-25769 HIGH This Week

Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /controller/UserController.java. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CSRF Wangmarket

NVD

CVSS 3.1

8.0

EPSS

0.0%

CVE-2025-15415

EPSS 0% CVSS 4.7

MEDIUM POC This Month

A vulnerability has been found in xnx3 wangmarket up to 6.4. The impacted element is the function uploadImage of the file /sits/uploadImage.do of the component XML File Handler. [CVSS 4.7 MEDIUM]

File Upload Authentication Bypass Wangmarket

NVD GitHub VulDB

CVE-2025-25770

EPSS 0% CVSS 6.8

MEDIUM POC This Month

CSRF Wangmarket

NVD

CVE-2025-25769

EPSS 0% CVSS 8.0

HIGH This Week

CSRF Wangmarket

NVD