xmall · Issues· 47 open
Open on GitHubLocally synced open issues (discussions stay on GitHub)
- #104
xmall 后台订单打印页存在由前台订单字段触发的存储型 XSS
Updated Aug 1, 2026 - #103
Missing Authentication and Horizontal IDOR on All Front-Mall Member Endpoints
Updated Jul 17, 2026 - #102
GeetestLib 存在未编码用户输入导致的 HTTP 参数注入漏洞 (CWE-74)
Updated Mar 15, 2026 - #100
Broken Access Control - Unauthorized Access to Other Users' Orders
Updated Jan 1, 2026 - #98
Cart endpoints allow cross-account modifications
Updated Dec 31, 2025 - #101
XSS Injection Vulnerability Report
Updated Nov 5, 2025 - #99
Avatar upload lets one user overwrite another’s profile image
Updated Nov 4, 2025 - #97
There exists a horizontal privilege escalation vulnerability in the xmall project
Updated Feb 18, 2025 - #96
There is an Incorrect Access Control vulnerability in xmall
Updated Nov 23, 2024 - #91
asd
Updated Aug 21, 2024 - #94
asd
Updated Aug 21, 2024 - #80
asd
Updated Aug 20, 2024 - #81
asd
Updated Aug 20, 2024 - #82
asd
Updated Aug 20, 2024 - #83
asd
Updated Aug 20, 2024