Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 15/04/2025 Updated: 25/04/2025

Privilege Escalation in Erick xmall v1.1 via Address Controller Method

An issue in Erick xmall v.1.1 and before allows a remote malicious user to escalate privileges via the updateAddress method of the Address Controller class.

Vulnerable Product	Search on Vulmon	Subscribe to Product
exrick xmall 1.1

CWE-269 https://nvd.nist.gov https://www.first.org/epss https://github.com/20210607/cve_public/blob/main/CVE-2025-28399.md

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2025-28399

Vulnerability Summary

References

Vulmon Search

About

Products

Connect