What’s Vulnerable › Vulnerabilities
CVE-2019-9761
- Severity: high (CVSS 7.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.7% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2019-03-14 · updated 2026-06-17
- Weakness: CWE-611
Description
An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without authentication. This occurs because of the call to wechat_getxml in include/plugin/payment/wechat/notify_url.php.
Affected products
- phpshe: 1.7
References
Get alerted when CVE-2019-9761 or the next vulnerability affects your stack