Linlinjava Litemall vulnerabilities

• linlinjava litemall linlinjava litemall Login Endpoint AdminAuthController.java excessive authentication CVE-2026-105237 6.3 MediumOctober 5, 2026
• linlinjava litemall linlinjava litemall Product Detail index.vue AdminGoodsService.validate cross site scripting CVE-2026-90570 4.8 MediumSeptember 13, 2026
• linlinjava litemall linlinjava litemall Admin Topic index.vue AdminTopicController.validate cross site scripting CVE-2026-90569 4.8 MediumSeptember 13, 2026
• linlinjava litemall linlinjava litemall Database Setting DbUtil.java load argument injection CVE-2026-8773 5.1 MediumMay 18, 2026
• linlinjava litemall linlinjava litemall Admin Endpoint sql injection CVE-2026-8772 5.1 MediumMay 17, 2026
• linlinjava litemall linlinjava litemall Front-end WeChat API WxGoodsController.java list sql injection CVE-2026-8771 6.9 MediumMay 17, 2026
• linlinjava litemall linlinjava litemall cancel WxAftersaleController improper authorization CVE-2025-10291 5.3 MediumSeptember 12, 2025
• linlinjava litemall linlinjava litemall Business Logic express logic error CVE-2025-8991 5.3 MediumAugust 15, 2025
• linlinjava litemall linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials CVE-2025-8974 6.3 MediumAugust 14, 2025
• linlinjava litemall linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload CVE-2025-8965 5.3 MediumAugust 14, 2025
• linlinjava litemall linlinjava litemall upload unrestricted upload CVE-2025-8764 5.3 MediumAugust 9, 2025
• linlinjava litemall linlinjava litemall File delete path traversal CVE-2025-8753 5.3 MediumAugust 9, 2025
• linlinjava litemall linlinjava litemall post improper authorization CVE-2025-6702 5.3 MediumJune 26, 2025
• linlinjava litemall A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain... CVE-2024-46382 7.5 HighSeptember 19, 2024
• linlinjava litemall linlinjava litemall AdminGoodscontroller.java sql injection CVE-2024-6452 5.3 MediumJuly 2, 2024
• linlinjava litemall SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain... CVE-2024-24323 7.2 HighFebruary 27, 2024
• linlinjava litemall An issue was discovered in litemall 0.9.0. Arbitrary file download is possible via ../ directory... CVE-2018-18434 7.5 HighOctober 17, 2018