CNNVD-202507-3393 Information
CNNVD ID
CNNVD-202507-3393
Related CVE
- CNNVD Published: 2025-07-26
Description (Chinese)
mall是macro个人开发者的一套电商系统，包括前台商城系统及后台管理系统。 mall 1.0.3及之前版本存在代码注入漏洞，该漏洞源于文件/swagger-ui/index.html中参数configUrl导致跨站脚本。
Description (English)
Mall is a set of electrician systems for Macro’s personal developers, including the front and back office management systems. mall 1.0.3 and previous versions have a code-injection loophole, which originates from the parameter configUrl in file/swagger-ui/index.html, which leads to a cross-site script.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
个人开发者
Published
2025-07-26
Last Modified
2026-02-24
References
https://github.com/macrozheng/mall/issues/919 https://github.com/zast-ai/vulnerability-reports/blob/main/mall/DOM_XSS.md https://vuldb.com/?ctiid.317604 https://vuldb.com/?id.317604 https://vuldb.com/?submit.615731 https://access.redhat.com/security/cve/cve-2025-8191 https://cxsecurity.com/issue/WLB-2025100015 https://www.exploit-db.com/exploits/52392
Share on: