critical9.8
CVE-2025-28399
An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the updateAddress method of the Address Controller class.
Impact
An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the updateAddress method of the Address Controller class.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Exrick | Xmall | Version 1.1 |