CVE Database
/

CVE-2025-28399

Back to search

CVE-2025-28399

Published: Apr 15, 2025

Modified: Apr 16, 2025

PUBLISHED

Description

An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the updateAddress method of the Address Controller class.

VendorProductVersions

n/a

n/a

affected
n/a

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now