CVE-2025-3554

Name of the Vulnerable Software and Affected Versions: phpshe version 1.8

Description: A problem was found in the processing of the file "api.php?mod=cron&act=buyer". The manipulation of the act argument leads to cross-site scripting. The attack may be initiated remotely.

Recommendations: For phpshe version 1.8, consider restricting access to the "api.php?mod=cron&act=buyer" endpoint until a fix is available. As a temporary workaround, avoid using the act argument in this endpoint to minimize the risk of exploitation.