CVE-2019-9761

7.5 highEPSS 1.7%

High (7.5) in phpshe phpshe. EPSS 1.7% chance of exploitation in the next 30 days.

An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without authentication. This occurs because of the call to wechat_getxml in include/plugin/payment/wechat/notify_url.php.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2019-03-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

phpshe:phpshe

References

https://gitee.com/koyshe/phpshe/issues/ITC0C
https://gitee.com/koyshe/phpshe/issues/ITC0C

Check your stack JSON