CVE-2026-110122 | PickMall lilishop up to 4.4 Freight freight resource injection

October 13, 2026 Yanac

A vulnerability categorized as problematic has been discovered in PickMall lilishop up to 4.4. This vulnerability affects the function GoodsServiceImpl.freight/GoodsSkuServiceImpl.freight of the file /store/goods/goods/freight of the component Freight. Executing a manipulation can lead to improper control of resource identifiers.

This vulnerability appears as CVE-2026-110122. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More