PT-2025-39364 · Mikecen · Wechat-Face-Recognition

Dev03301 · Published 2025-09-25 · Updated 2025-09-25 · CVE-2025-10943

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MikeCen WeChat-Face-Recognition (affected versions not specified)

Description A security flaw exists in MikeCen WeChat-Face-Recognition. The issue involves cross site scripting resulting from manipulation of the echostr argument within the valid function of the wx.php file. This attack can be launched remotely. The product does not use versioning, and information about affected and unaffected releases is unavailable. The vendor was contacted regarding this disclosure but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-10943

Affected Products

Wechat-Face-Recognition

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-10943 · Security Note
• https://github.com/MikeCen/WeChat-Face-Recognition/blob/master/wx.php#L25 · Note
• https://vuldb.com/?submit.651882 · Note
• https://twitter.com/VulmonFeeds/status/1971192193650970892 · Twitter Post
• https://vuldb.com/?ctiid.325813 · Note
• https://t.me/cveNotify/136376 · Telegram Post
• https://vuldb.com/?id.325813 · Note
• https://twitter.com/CVEnew/status/1971190538540925364 · Twitter Post