Description
An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the updateAddress method of the Address Controller class.
Critical · 9.8
CVE-2025-28399
EUVD-2025-11090GHSA-vgw5-6pvc-ccx5
An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the updateAddress method of the Address Contro…
Published Apr 15, 2025 · Updated Apr 16, 2025 · Assigned by mitre