PatchTheCVEuzy-ssm-mall vulnerabilities and fixes
Recent CVEs affecting uzy-ssm-mall, with upgrade or downgrade steps. 6 tracked.
Also searched as: uzy ssm mall.
uzy-ssm-mall has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-10-08. Highest priority: CVE-2025-60834 (score 40/100).
- CVE-2025-60834 MEDIUM 6.5 DOWNGRADE A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via
- CVE-2025-60833 MEDIUM 6.5 DOWNGRADE An XML External Entity (XXE) vulnerability in the /mall/wxpay/pay component of uzy-ssm-mall v1.1.0 allows atta
- CVE-2025-3561 MEDIUM 4.3 DOWNGRADE A vulnerability was found in ghostxbh uzy-ssm-mall 1.0.0
- CVE-2025-3560 LOW 3.5 DOWNGRADE A vulnerability was found in ghostxbh uzy-ssm-mall 1.0.0 and classified as problematic
- CVE-2025-3559 MEDIUM 6.3 DOWNGRADE A vulnerability has been found in ghostxbh uzy-ssm-mall 1.0.0 and classified as critical
- CVE-2025-3558 MEDIUM 6.3 DOWNGRADE A vulnerability, which was classified as critical, was found in ghostxbh uzy-ssm-mall 1.0.0
FAQ
How do I fix uzy-ssm-mall vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is uzy-ssm-mall being exploited right now?
None of the tracked uzy-ssm-mall CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which uzy-ssm-mall CVE should I patch first?
CVE-2025-60834 currently ranks highest (40/100): A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via.