VendorsExrickxmallany version
Vulnerabilities

Exrick Xmall any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2025-45612
Incorrect access control in xmall v1.1 allows attackers to bypass authentication via a crafted GET request to /index.
Published 2025-05-05 · Analyzed
9.8EPSS 0.005
CVE-2021-43432
A Cross Site Scripting (XSS) vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp.
Published 2022-04-07 · Modified
6.1EPSS 0.008