← Database

CVE-2025-28399

CRITICAL CVSS: 9.8 Published: 2025-04-15 Modified: 2026-06-17

Description

An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the updateAddress method of the Address Controller class.

Affected Platforms

Exrick Xmall

Weakness Type

CWE-269

References