Threats tagged 'ghsa-mr5q-563w-gq7x'

A vulnerability in Sanluan PublicCMS 5 affects the TradePaymentService.pendingRefund function, allowing remote attackers to bypass authorization by manipulating the userId argument. The vulnerable web trade payment controller was removed starting with the 202608 series. Exploit code is publicly available. The vulnerability has a medium severity rating with a CVSS score of 6.3.