Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

litemall — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in litemall, with AI-generated Chinese analysis, references, and POCs.

Vendor: linlinjava

CVE ID Title CVSS Severity Published
CVE-2026-105237 linlinjava litemall Login Endpoint AdminAuthController.java excessive authentication CWE-307 3.7 Low 2026-10-05
CVE-2026-90570 linlinjava litemall Product Detail index.vue AdminGoodsService.validate cross site scripting CWE-79 2.4 Low 2026-09-13
CVE-2026-90569 linlinjava litemall Admin Topic index.vue AdminTopicController.validate cross site scripting CWE-79 2.4 Low 2026-09-13
CVE-2026-8773 linlinjava litemall Database Setting DbUtil.java load argument injection CWE-88 4.7 Medium 2026-05-18
CVE-2026-8772 linlinjava litemall Admin Endpoint sql injection CWE-89 4.7 Medium 2026-05-17
CVE-2026-8771 linlinjava litemall Front-end WeChat API WxGoodsController.java list sql injection CWE-89 7.3 High 2026-05-17
CVE-2025-10291 linlinjava litemall cancel WxAftersaleController improper authorization CWE-285 6.3 Medium 2025-09-12
CVE-2025-8991 linlinjava litemall Business Logic express logic error CWE-840 4.3 Medium 2025-08-15
CVE-2025-8974 linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials CWE-798 3.7 Low 2025-08-14
CVE-2025-8965 linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload CWE-434 6.3 Medium 2025-08-14
CVE-2025-8764 linlinjava litemall upload unrestricted upload CWE-434 6.3 Medium 2025-08-09
CVE-2025-8753 linlinjava litemall File delete path traversal CWE-22 5.4 Medium 2025-08-09
CVE-2025-6702 linlinjava litemall post improper authorization CWE-285 4.3 Medium 2025-06-26
CVE-2024-6452 linlinjava litemall AdminGoodscontroller.java sql injection CWE-89 6.3 Medium 2024-07-02

All 14 known CVE vulnerabilities affecting litemall with full Chinese analysis, references, and POCs where available.