Threats tagged 'ghsa-gc9m-cqr9-5r48'

A weakness in macrozheng mall-swarm up to version 1.0.3 affects the cancelUserOrder function, allowing remote attackers to manipulate the orderId argument and cause improper authorization. This vulnerability has a medium severity score and public exploit code is available. The vendor has not responded to the disclosure and no patch information is provided.