Mall vulnerabilities

2 known vulnerabilities in Mall from Macrozheng. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  mall: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2026-25858Feb 7, 2026Macrozheng

  macrozheng mall version 1.0.3 and prior contains an authentication vulnerability in the mall-portal password reset workflow that allows an unauthenticated attacker to reset arbitrary user account passwords using only a victim’s telephone number. The password r

• 8.1 High severity

  mall: Use of Default Cryptographic Key

  CVE-2024-11619Nov 22, 2024Macrozheng

  A vulnerability, which was classified as problematic, has been found in macrozheng mall up to 1.0.3. Affected by this issue is some unknown functionality of the component JWT Token Handler. The manipulation leads to use of default cryptographic key. The comple