MA
Product
mall
27
CVEs
0
On KEV
9.1
Max CVSS
5
New 30D
Severity mix
Critical 1High 1Medium 20Low 5
Watch
Add mall to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25858 | 9.1 | Feb 7 | macrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure Affected: through 1.0.3 |
| CVE-2024-11619 | 8.1 | Nov 22 | A vulnerability, which was classified as problematic, has been found in macrozheng mall up to 1.0.3 Affected: through 1.0.3 |
| CVE-2026-108784 | 6.5 | Oct 12 | macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2025-13443 | 6.5 | Nov 20 | macrozheng mall delete access control Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2026-108785 | 6.3 | Oct 12 | macrozheng mall JwtAuthenticationTokenFilter refreshToken JwtTokenUtil.refreshHeadToken session expiration Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2026-15186 | 6.3 | Jul 9 | macrozheng mall Portal Endpoint create resource injection Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2025-8741 | 5.9 | Aug 8 | macrozheng mall login cleartext transmission Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2026-109406 | 5.4 | Oct 13 | macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2026-82423 | 5.4 | Aug 29 | macrozheng mall Payment Status Endpoint paySuccess behavioral workflow Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2025-8750 | 5.4 | Aug 9 | macrozheng mall Add Product Page upload cross site scripting Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2025-8191 | 5.4 | Jul 26 | macrozheng mall Swagger UI index.html cross site scripting Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2025-13117 | 5.3 | Nov 13 | macrozheng mall-swarm/mall cancelOrder improper authorization Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2025-13116 | 5.3 | Nov 13 | macrozheng mall-swarm/mall cancelUserOrder improper authorization Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2025-13115 | 5.3 | Nov 13 | macrozheng mall-swarm/mall Order Details detail improper authorization Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2025-8755 | 5.3 | Aug 9 | macrozheng mall com.macro.mall.portal.controller UmsMemberController.java detail authorization Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2026-10070 | 4.7 | May 29 | macrozheng mall Super Admin Password update improper authorization Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2026-79406 | 4.3 | Aug 25 | macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2025-15118 | 4.3 | Dec 28 | macrozheng mall Member Endpoint update improper authorization Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2025-13118 | 4.3 | Nov 13 | macrozheng mall-swarm paySuccess improper authorization Affected: through 1.0.3 |
| CVE-2025-9836 | 4.3 | Sep 2 | macrozheng mall paySuccess authorization Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2025-9835 | 4.3 | Sep 2 | macrozheng mall cancelUserOrder cancelOrder authorization Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2026-82364 | 4.2 | Aug 29 | macrozheng mall Order Submission submit race condition Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2026-19361 | 3.7 | Aug 9 | macrozheng mall mall-portal getAuthCode password recovery Affected: 0504e86 |
| CVE-2025-9514 | 3.7 | Aug 27 | macrozheng mall Registration weak password Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2025-8742 | 3.7 | Aug 8 | macrozheng mall Admin Login excessive authentication Affected: 1.0.3 |
| CVE-2026-109407 | 3.1 | Oct 13 | macrozheng mall Coupon Redemption generateOrder race condition Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2026-109410 | 2.4 | Oct 13 | macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMoneyInfo calculation Affected: 1.0.3 dcaa93b |
Showing 27