CVE-2026-105572 | PickMall Lilishop up to 4.2.4 Buyer Invoice List /buyer/trade/receipt memberId authorization (Issue 149)

October 5, 2026 Yanac

A vulnerability classified as problematic was found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipulation of the argument memberId leads to authorization bypass.

This vulnerability is referenced as CVE-2026-105572. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More