What’s Vulnerable › Vulnerabilities

CVE-2025-9514: macrozheng mall Registration weak password

• Severity: low (CVSS 3.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-08-27 · updated 2026-06-17
• Weakness: CWE-521

Description

A vulnerability has been found in macrozheng mall up to 1.0.3. This impacts an unknown function of the component Registration. Such manipulation leads to weak password requirements. The attack can be executed remotely. Attacks of this nature are highly complex. The exploitability is said to be difficult. The vendor deleted the GitHub issue for this vulnerability without and explanation.

Affected products

• macrozheng mall: through 1.0.3

References

• https://github.com/macrozheng/mall/issues/923
• https://vuldb.com/?ctiid.321507
• https://vuldb.com/?id.321507
• https://vuldb.com/?submit.635503

Get alerted when CVE-2025-9514 or the next vulnerability affects your stack