litemall vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

LI

Product

litemall

by linlinjava · last CVE Oct 5, 2026

17

CVEs

0

On KEV

9.8

Max CVSS

1

New 30D

Vulnerabilities17 In the news0 Timeline

Severity mix

Critical 1High 7Medium 6Low 3

Severity

All severities17 Critical1 High7 Medium6 Low3

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add litemall to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-8974	9.8	1%	Aug 14	linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +3 more
CVE-2025-10291	8.8	0%	Sep 12	linlinjava litemall cancel WxAftersaleController improper authorization Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +3 more
CVE-2025-8965	8.8	0%	Aug 14	linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +3 more
CVE-2024-6452	8.8	0%	Jul 2	A vulnerability classified as critical was found in linlinjava litemall up to 1.8.0 Affected: through 1.8.0
CVE-2024-46382	7.5	1%	Sep 19	A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn, and name parameters in… Affected: 1.8.0
CVE-2018-18434	7.5	2%	Oct 17	An issue was discovered in litemall 0.9.0 Affected: 0.9.0
CVE-2026-8771	7.3	0%	May 17	linlinjava litemall Front-end WeChat API WxGoodsController.java list sql injection Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +3 more
CVE-2024-24323	7.2	1%	Feb 27	SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray… Affected: through 1.8.0
CVE-2025-8764	5.4	0%	Aug 9	linlinjava litemall upload unrestricted upload Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +3 more
CVE-2025-8753	5.4	1%	Aug 9	linlinjava litemall File delete path traversal Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +3 more
CVE-2025-6702	5.3	0%	Jun 26	linlinjava litemall post improper authorization Affected: 1.8.0
CVE-2026-8773	4.7	0%	May 18	linlinjava litemall Database Setting DbUtil.java load argument injection Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +3 more
CVE-2026-8772	4.7	0%	May 17	linlinjava litemall Admin Endpoint sql injection Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +3 more
CVE-2025-8991	4.3	0%	Aug 15	linlinjava litemall Business Logic express logic error Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +3 more
CVE-2026-105237	3.7	0%	Oct 5	linlinjava litemall Login Endpoint AdminAuthController.java excessive authentication Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +3 more
CVE-2026-90570	2.4	0%	Sep 13	linlinjava litemall Product Detail index.vue AdminGoodsService.validate cross site scripting Affected: 1.4.0; 1.5.0; 1.6.0; 1.7.0; 1.8.0
CVE-2026-90569	2.4	0%	Sep 13	linlinjava litemall Admin Topic index.vue AdminTopicController.validate cross site scripting Affected: 1.5.0; 1.6.0; 1.7.0; 1.8.0