CVE-2025-15118 | macrozheng mall up to 1.0.3 Member Endpoint /member/address/update/ improper authorization

December 27, 2025 Yanac

A vulnerability has been found in macrozheng mall up to 1.0.3 and classified as critical. This vulnerability affects unknown code of the file /member/address/update/ of the component Member Endpoint. The manipulation leads to improper authorization.

This vulnerability is referenced as CVE-2025-15118. Remote exploitation of the attack is possible. Furthermore, an exploit is available.VulDB Recent EntriesRead More