Description
Improper input validation vulnerability in Mangboard commerce package could lead to occur for abnormal request. A remote attacker can exploit this vulnerability to manipulate the total order amount into a negative number and then pay for the order.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hometory | Mangboard commerce package | unspecified – ≤ 1.3.8 | — |