What’s Vulnerable › Products

linlinjava litemall vulnerabilities

17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.

Check whether your linlinjava litemall version is affected

Latest linlinjava litemall vulnerabilities

• CVE-2026-105237 — linlinjava litemall Login Endpoint AdminAuthController.java excessive authentication (CVSS 3.7)
• CVE-2026-90570 — linlinjava litemall Product Detail index.vue AdminGoodsService.validate cross site scripting (CVSS 2.4)
• CVE-2026-90569 — linlinjava litemall Admin Topic index.vue AdminTopicController.validate cross site scripting (CVSS 2.4)
• CVE-2026-8773 — linlinjava litemall Database Setting DbUtil.java load argument injection (CVSS 4.7)
• CVE-2026-8772 — linlinjava litemall Admin Endpoint sql injection (CVSS 4.7)
• CVE-2026-8771 — linlinjava litemall Front-end WeChat API WxGoodsController.java list sql injection (CVSS 7.3)
• CVE-2025-10291 — linlinjava litemall cancel WxAftersaleController improper authorization (CVSS 8.8)
• CVE-2025-8991 — linlinjava litemall Business Logic express logic error (CVSS 4.3)
• CVE-2025-8974 — linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials (CVSS 9.8)
• CVE-2025-8965 — linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload (CVSS 8.8)
• CVE-2025-8764 — linlinjava litemall upload unrestricted upload (CVSS 5.4)
• CVE-2025-8753 — linlinjava litemall File delete path traversal (CVSS 5.4)
• CVE-2025-6702 — linlinjava litemall post improper authorization (CVSS 5.3)
• CVE-2024-46382 — (CVSS 7.5)
• CVE-2024-6452 — linlinjava litemall AdminGoodscontroller.java sql injection (CVSS 8.8)
• CVE-2024-24323 — (CVSS 7.2)
• CVE-2018-18434 — (CVSS 7.5)