Advisories · Technology

linlinjava litemall.

Every CVE that names linlinjava litemall among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-105237 CVE record

CVSS 6.3 Medium

linlinjava litemall Login Endpoint AdminAuthController.java excessive authentication
- linlinjava litemall
- Authentication bypass
- CWE-799
Not analysed yet 5 Oct 2026
CVE-2026-90570 CVE record

CVSS 4.8 Medium

linlinjava litemall Product Detail index.vue AdminGoodsService.validate cross site scripting
- linlinjava litemall
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 13 Sept 2026
CVE-2026-90569 CVE record

CVSS 4.8 Medium

linlinjava litemall Admin Topic index.vue AdminTopicController.validate cross site scripting
- linlinjava litemall
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 13 Sept 2026
CVE-2026-8773 CVE record

CVSS 5.1 Medium

linlinjava litemall Database Setting DbUtil.java load argument injection
- linlinjava litemall
- Other injection
- Command injection
Not analysed yet 18 May 2026
CVE-2026-8772 CVE record

CVSS 5.1 Medium

linlinjava litemall Admin Endpoint sql injection
- linlinjava litemall
- Other injection
- SQL injection
Not analysed yet 17 May 2026
CVE-2025-10291 CVE record

CVSS 5.3 Medium

linlinjava litemall cancel WxAftersaleController improper authorization
- linlinjava litemall
- Privilege escalation
- Broken access control
Not analysed yet 12 Sept 2025
CVE-2025-8991 CVE record

CVSS 5.3 Medium

linlinjava litemall Business Logic express logic error
- linlinjava litemall
- CWE-840
Not analysed yet 15 Aug 2025
CVE-2025-8974 CVE record

CVSS 6.3 Medium

linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials
- linlinjava litemall
- Hard-coded credentials
Not analysed yet 14 Aug 2025
CVE-2025-8965 CVE record

CVSS 5.3 Medium

linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload
- linlinjava litemall
- Broken access control
- Unrestricted file upload
Not analysed yet 14 Aug 2025
CVE-2025-8764 CVE record

CVSS 5.3 Medium

linlinjava litemall upload unrestricted upload
- linlinjava litemall
- Broken access control
- Unrestricted file upload
Not analysed yet 9 Aug 2025
CVE-2025-8753 CVE record

CVSS 5.3 Medium

linlinjava litemall File delete path traversal
- linlinjava litemall
- Path traversal
Not analysed yet 9 Aug 2025
CVE-2025-6702 CVE record

CVSS 5.3 Medium

linlinjava litemall post improper authorization
- linlinjava litemall
- Privilege escalation
- Broken access control
Not analysed yet 26 Jun 2025
CVE-2024-6452 CVE record

CVSS 5.3 Medium

linlinjava litemall AdminGoodscontroller.java sql injection
- linlinjava litemall
- SQL injection
Not analysed yet 2 Jul 2024