Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-45612 1 Exrick 1 Xmall 2025-06-16 9.8 Critical
Incorrect access control in xmall v1.1 allows attackers to bypass authentication via a crafted GET request to /index.
CVE-2021-43432 1 Exrick 1 Xmall 2024-11-21 6.1 Medium
A Cross Site Scripting (XSS) vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp.