Tmall vulnerabilities
We track 3 vulnerabilities in Tmall products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 24, 2025.
Latest Tmall vulnerabilities
- 8.8 High severity
Demo: Cross-Site Request Forgery
A vulnerability was found in Tmall Demo up to 20250505. It has been rated as problematic. This issue affects some unknown processing of the file tmall/admin/account/logout. The manipulation leads to cross-site request forgery. The attack may be initiated remot
- 7.2 High severity
Demo: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Tmall Demo up to 20250505. It has been declared as critical. This vulnerability affects the function uploadCategoryImage of the file tmall/admin/uploadCategoryImage. The manipulation of the argument File leads to unrestricted uploa
- 7.2 High severity
Demo: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Tmall Demo up to 20250505. It has been classified as critical. This affects the function uploadProductImage of the file tmall/admin/uploadProductImage. The manipulation of the argument File leads to unrestricted upload. It is possi