CVE-2025-39349: Potenzaglobalsolutions Ciyashop

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability in Potenzaglobalsolutions CiyaShop ciyashop allows Object Injection.This issue affects CiyaShop: from n/a through <= 4.18.0.

Affected products

• Potenzaglobalsolutions Ciyashop: up to and including 4.18.0

Published 2025-05-19. Last modified 2026-06-17.