Vulnerabilities
CVE-2023-36331 - Xmall Unauthenticated Order Details Disclosure Vulnerability (2026)
CVE ID : CVE-2023-36331 Published : Jan. 12, 2026, 8:15 p.m. | 30 minutes ago Description : Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to arbitrarily access other users' order details via manipulation of the query parameter userId. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE Details
CVE ID
Published
Jan. 12, 2026
