All issues

Search results

xmall 后台订单打印页存在由前台订单字段触发的存储型 XSS

Status: Open.

#104 In Exrick/xmall;

· JunRoinxxX opened on Aug 1, 2026

Missing Authentication and Horizontal IDOR on All Front-Mall Member Endpoints

Status: Open.

#103 In Exrick/xmall;

· geo-chen opened on Jul 17, 2026

GeetestLib 存在未编码用户输入导致的 HTTP 参数注入漏洞 (CWE-74)

Status: Open.

#102 In Exrick/xmall;

· weaver4VD opened on Mar 15, 2026

XSS Injection Vulnerability Report

Status: Open.

#101 In Exrick/xmall;

· YLChen-007 opened on Nov 5, 2025

Broken Access Control - Unauthorized Access to Other Users' Orders

Status: Open.

#100 In Exrick/xmall;

· YLChen-007 opened on Nov 4, 2025

Avatar upload lets one user overwrite another’s profile image

Status: Open.

#99 In Exrick/xmall;

· YLChen-007 opened on Nov 4, 2025

Cart endpoints allow cross-account modifications

Status: Open.

#98 In Exrick/xmall;

· YLChen-007 opened on Nov 4, 2025

There exists a horizontal privilege escalation vulnerability in the xmall project

Status: Open.

#97 In Exrick/xmall;

· 20210607 opened on Feb 18, 2025

There is an Incorrect Access Control vulnerability in xmall

Status: Open.

#96 In Exrick/xmall;

· RacerZ-fighting opened on Nov 23, 2024

[asd

Status: Open.

#95 In Exrick/xmall;

· GatekeeperBuster opened on Dec 13, 2023

asd

Status: Open.

#94 In Exrick/xmall;

· GatekeeperBuster opened on Dec 13, 2023

asd

Status: Open.

#93 In Exrick/xmall;

· GatekeeperBuster opened on Dec 13, 2023