CVE-2026-111348 | Likeshop up to 3.5.1 AfterSale AfterSale.php detail/goodsInfo/cancel/express/again ids resource injection

October 15, 2026 Yanac

A vulnerability marked as critical has been reported in Likeshop up to 3.5.1. The impacted element is the function detail/goodsInfo/cancel/express/again of the file AfterSale.php of the component AfterSale. The manipulation of the argument ids leads to improper control of resource identifiers.

This vulnerability is uniquely identified as CVE-2026-111348. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More