Threats tagged 'ghsa-qwp5-2j5x-f2qf'

CVE-2025-13443 is a vulnerability in macrozheng mall versions up to 1.0.3 affecting the delete function in /member/readHistory/delete. The issue involves improper access controls when manipulating the argument 'ids', allowing remote attackers to exploit this flaw. The vulnerability has a medium severity score of 5.4 and public exploit code is available.