medium5.4
CVE-2025-13443
A vulnerability was detected in macrozheng mall up to 1.0.3.
Impact
A vulnerability was detected in macrozheng mall up to 1.0.3. Affected by this issue is the function delete of the file /member/readHistory/delete. Performing manipulation of the argument ids results in improper access controls. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Macrozheng | Mall | through 1.0.3 |