Security Risk Category

macrozheng-mall Security Risks

Published vulnerability pages connected to macrozheng-mall. One risk can appear in multiple categories while keeping one canonical page.

macrozheng-mall risks

Showing 1 of 1 published risks.

low

macrozheng mall Order Return IDOR Vulnerability

A vulnerability was identified in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /returnApply/create of the component Portal Endpoint. The manipulation of the argument orderId leads to improper control of resource identifiers. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor deleted the GitHub issue for this vulnerability without any explanation.

CVE-2026-15186idoraccess-controlmacrozheng-mall

Updated Jul 10, 2026