agentprime: gz-yami-mall4jEvery new CVE for gz-yami-mall4j.https://agentprime.io/CVE-2026-108691: mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdListhttps://agentprime.io/advisories/CVE-2026-108691/https://agentprime.io/advisories/CVE-2026-108691/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 01:12:25 GMTCVECVE-2026-108690: mall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdListhttps://agentprime.io/advisories/CVE-2026-108690/https://agentprime.io/advisories/CVE-2026-108690/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 01:12:24 GMTCVECVE-2026-102367: mall4j through 4.0 Insufficient Session Expiration via Token Refreshhttps://agentprime.io/advisories/CVE-2026-102367/https://agentprime.io/advisories/CVE-2026-102367/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 23:34:31 GMTCVECVE-2026-102366: mall4j through 4.0 Unrestricted File Upload in Admin File Endpointshttps://agentprime.io/advisories/CVE-2026-102366/https://agentprime.io/advisories/CVE-2026-102366/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 23:34:30 GMTCVECVE-2026-102365: mall4j through 4.0 Missing Authorization in Admin User Address Endpointshttps://agentprime.io/advisories/CVE-2026-102365/https://agentprime.io/advisories/CVE-2026-102365/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 23:34:29 GMTCVECVE-2026-102364: mall4j through 4.0 Improper Authentication Accepts Storefront Tokens on Admin APIhttps://agentprime.io/advisories/CVE-2026-102364/https://agentprime.io/advisories/CVE-2026-102364/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 23:34:29 GMTCVECVE-2026-102363: mall4j through 4.0 Unauthenticated Shipment Tracking Disclosure via Order Numberhttps://agentprime.io/advisories/CVE-2026-102363/https://agentprime.io/advisories/CVE-2026-102363/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 23:34:28 GMTCVECVE-2026-102362: mall4j through 4.0 Missing Authentication in Product Review Deletionhttps://agentprime.io/advisories/CVE-2026-102362/https://agentprime.io/advisories/CVE-2026-102362/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 23:34:27 GMTCVECVE-2026-102361: mall4j through 4.0 Missing Authentication in Password Update Endpointhttps://agentprime.io/advisories/CVE-2026-102361/https://agentprime.io/advisories/CVE-2026-102361/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 23:34:27 GMTCVEcritical