CVE-2025-50722

Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2025-08-25

Last modified

2025-08-25

Weaknesses

CWE-77

Affected products

• Sparkshop (Sparkshop)

References

• https://github.com/147536951/Qiany1/blob/main/SparkShop.pdf