CVE-2025-15118: macrozheng mall Member Endpoint update improper authorization

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-12-28 · updated 2026-10-07
Weakness: CWE-266

Description

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This vulnerability affects unknown code of the file /member/address/update/ of the component Member Endpoint. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

Affected products

macrozheng mall: through 1.0.3

References

https://github.com/Hwwg/cve/issues/31
https://vuldb.com/?ctiid.338496
https://vuldb.com/?id.338496
https://vuldb.com/?submit.711758

Get alerted when CVE-2025-15118 or the next vulnerability affects your stack