# CVE-2025-61546: There is an issue on the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solutions Print Shop Pro…

Source: https://junglewise.ai/threats/cve-2025-61546-there-is-an-issue-on-the-psp-appnet-store-cartv12-aspx  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-01-08  
License: CC BY 4.0 with a link back

CVE-2025-61546 · Severity: critical · CVSS 9.1 · Published 2026-01-08

There is an issue on the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34 (fixed in 19.69) that enables remote attacker to create financial discrepancies by purchasing items with a negative quantity. This vulnerability is possible due to reliance on client-side input validation controls.

Technologies: [Edubusinesssolutions Print Shop Pro Webdesk](https://junglewise.ai/threats/technologies/print-shop-pro-webdesk). Vendors: [Edubusinesssolutions](https://junglewise.ai/threats/vendors/edubusinesssolutions).

## Quick answers

**Is CVE-2025-61546 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-61546 being exploited in the wild.

**How severe is CVE-2025-61546?** Critical severity, with a CVSS score of 9.1, published 8 January 2026.

**Which products and versions are affected?** Edubusinesssolutions Print Shop Pro Webdesk. The advisory does not name versions.

**Is there a fix for CVE-2025-61546?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-61546?** Check whether you run Edubusinesssolutions Print Shop Pro Webdesk. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Edubusinesssolutions Print Shop Pro Webdesk

## Related threats

- [edu Business Solutions Print Shop Pro WebDesk privilege escalation via AccessID](https://junglewise.ai/threats/cve-2026-26725-edu-business-solutions-print-shop-pro-webdesk-privilege)
- [Cross-Site Scripting (XSS) is present on the ctl00_Content01_fieldValue parameters on the…](https://junglewise.ai/threats/cve-2025-61550-cross-site-scripting-xss-is-present-on-the-ctl00-content01)
- [Cross-Site Scripting (XSS) is present on the LoginID parameter on the /PSP/app/web/reg/reg_display.asp endpoint in edu…](https://junglewise.ai/threats/cve-2025-61549-cross-site-scripting-xss-is-present-on-the-loginid-parameter-on)
- [SQL Injection is present on the hfInventoryDistFormID parameter in the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice…](https://junglewise.ai/threats/cve-2025-61548-sql-injection-is-present-on-the-hfinventorydistformid-parameter)
- [Cross-Site Request Forgery (CSRF) is present on all functions in edu Business Solutions Print Shop Pro WebDesk version…](https://junglewise.ai/threats/cve-2025-61547-cross-site-request-forgery-csrf-is-present-on-all-functions-in)