Skip to contentNewbee-ltd Newbee-mall vulnerabilities
- newbee-ltd newbee-mallnewbee-ltd newbee-mall Shopping Cart Quantity updateAccountHeadAndDetail logic errorCVE-2026-1055735.3 Medium
- newbee-ltd newbee-mallnewbee-ltd newbee-mall Goods Save Endpoint UploadController.java cross site scriptingCVE-2026-940455.1 Medium
- newbee-ltd newbee-mallnewbee-ltd newbee-mall Multiple Endpoints cross-site request forgeryCVE-2026-26585.3 Medium
- newbee-ltd newbee-mallnewbee-mall Unsalted MD5 Password Hashing Enables Offline Credential CrackingCVE-2026-262199.3 Critical
- newbee-ltd newbee-mallnewbee-mall Default Seeded Administrator Credentials Allow Account TakeoverCVE-2026-262189.3 Critical
- newbee-ltd newbee-mall-plusnewbee-mall-plus Product Information Edit UploadController.java upload unrestricted uploadCVE-2025-153605.1 Medium
- newbee-ltd newbee-mallnewbee-mall kaptcha mallKaptcha CaptchaCVE-2025-104236.3 Medium
- newbee-ltd newbee-mallnewbee-mall Order Status paySuccess improper authorizationCVE-2025-104225.3 Medium
- newbee-ltd newbee-mallnewbee-mall UploadController.java upload unrestricted uploadCVE-2025-42595.3 Medium
- newbee-ltd newbee-mallnewbee-mall Add Category Page save cross site scriptingCVE-2025-11145.1 Medium