Gz-yami Mall4j vulnerabilities
- gz-yami mall4jmall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdList5.3 Medium
- gz-yami mall4jmall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdList5.3 Medium
- gz-yami mall4jmall4j through 4.0 Insufficient Session Expiration via Token Refresh5.3 Medium
- gz-yami mall4jmall4j through 4.0 Unrestricted File Upload in Admin File Endpoints2.1 Low
- gz-yami mall4jmall4j through 4.0 Missing Authorization in Admin User Address Endpoints7.1 High
- gz-yami mall4jmall4j through 4.0 Improper Authentication Accepts Storefront Tokens on Admin API5.3 Medium
- gz-yami mall4jmall4j through 4.0 Unauthenticated Shipment Tracking Disclosure via Order Number6.3 Medium
- gz-yami mall4jmall4j through 4.0 Missing Authentication in Product Review Deletion6.9 Medium
- gz-yami mall4jmall4j through 4.0 Missing Authentication in Password Update Endpoint9.3 Critical