CVE-2025-61546: Edubusinesssolutions Print Shop Pro Webdesk

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

There is an issue on the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34 (fixed in 19.69) that enables remote attacker to create financial discrepancies by purchasing items with a negative quantity. This vulnerability is possible due to reliance on client-side input validation controls.

Affected products

Published 2026-01-08. Last modified 2026-06-17.