Skip to content
OpenAdvisories

Vendor

likeshop

1 known vulnerabilities.

Products

likeshop 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-111348

    Likeshop through 3.5.1 IDOR via AfterSale API Refund Endpoints

    Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale.php and AfterSaleLogic.php that lets authenticated users access other customers' after-sale records by supplying their ids. Attackers with self-registered accounts …

    likeshop likeshop