CVE-2025-3975 — Vulnetix

Try Vulnetix Request Demo

CVE-2025-3975 PUBLISHED CVSS 6.900000095367432 MEDIUM

A vulnerability was found in ScriptAndTools eCommerce-website-in-PHP 3.0 and classified as problematic. This issue affects some unknown processing of the file /admin/subscriber-csv.php. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

EPSS 0.23% · 45.5th percentile

Risk Scores

CVSS v4.0

6.900000095367432

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

EPSS Score

0.23%

45.5th percentile

Affected Products

Vendor	Product	Versions
ScriptAndTools	eCommerce-website-in-PHP	3.0
scriptandtools	ecommerce-website-in-php	3.0

Timeline

Apr 27, 2025 CVE Published
Apr 27, 2025 PoC Published
Apr 27, 2025 PoC Published
Apr 28, 2025 EPSS Score
May 9, 2025 EPSS Score
May 12, 2025 CVE Updated
May 21, 2025 EPSS Score
May 29, 2025 Coalition ESS Score
Jun 1, 2025 EPSS Score
Jun 13, 2025 EPSS Score
Jun 24, 2025 EPSS Score
Jul 5, 2025 EPSS Score

References

Open in Interactive Console →