{"items":[{"id":"CVE-2026-105237","published":"2026-10-05T06:00:11.321Z","updated":"2026-10-05T15:30:05.623Z","title":"linlinjava litemall Login Endpoint AdminAuthController.java excessive authentication","severity":"MEDIUM","score":6.3,"vendor":"linlinjava","product":"litemall","kev":false,"epss":0.00405,"kevAdded":null,"exploit":true},{"id":"CVE-2026-90570","published":"2026-09-13T16:45:10.140Z","updated":"2026-09-16T14:12:33.189Z","title":"linlinjava litemall Product Detail index.vue AdminGoodsService.validate cross site scripting","severity":"MEDIUM","score":4.8,"vendor":"linlinjava","product":"litemall","kev":false,"epss":0.00368,"kevAdded":null,"exploit":false},{"id":"CVE-2026-90569","published":"2026-09-13T16:30:10.030Z","updated":"2026-09-14T17:17:58.614Z","title":"linlinjava litemall Admin Topic index.vue AdminTopicController.validate cross site scripting","severity":"MEDIUM","score":4.8,"vendor":"linlinjava","product":"litemall","kev":false,"epss":0.00368,"kevAdded":null,"exploit":false},{"id":"CVE-2026-8773","published":"2026-05-18T00:00:13.854Z","updated":"2026-05-18T14:31:39.120Z","title":"linlinjava litemall Database Setting DbUtil.java load argument injection","severity":"MEDIUM","score":5.1,"vendor":"linlinjava","product":"litemall","kev":false,"epss":0.00244,"kevAdded":null,"exploit":true},{"id":"CVE-2026-8772","published":"2026-05-17T23:45:10.800Z","updated":"2026-05-18T17:51:36.677Z","title":"linlinjava litemall Admin Endpoint sql injection","severity":"MEDIUM","score":5.1,"vendor":"linlinjava","product":"litemall","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2026-8771","published":"2026-05-17T23:30:10.247Z","updated":"2026-05-18T12:27:39.487Z","title":"linlinjava litemall Front-end WeChat API WxGoodsController.java list sql injection","severity":"MEDIUM","score":6.9,"vendor":"linlinjava","product":"litemall","kev":false,"epss":0.00259,"kevAdded":null,"exploit":true},{"id":"CVE-2025-10291","published":"2025-09-12T05:32:07.780Z","updated":"2025-09-12T16:39:03.224Z","title":"linlinjava litemall cancel WxAftersaleController improper authorization","severity":"MEDIUM","score":5.3,"vendor":"linlinjava","product":"litemall","kev":false,"epss":0.00348,"kevAdded":null,"exploit":true},{"id":"CVE-2025-8991","published":"2025-08-15T00:32:05.399Z","updated":"2025-08-15T14:26:04.500Z","title":"linlinjava litemall Business Logic express logic error","severity":"MEDIUM","score":5.3,"vendor":"linlinjava","product":"litemall","kev":false,"epss":0.00366,"kevAdded":null,"exploit":true},{"id":"CVE-2025-8974","published":"2025-08-14T18:02:08.547Z","updated":"2025-08-14T19:17:47.420Z","title":"linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials","severity":"MEDIUM","score":6.3,"vendor":"linlinjava","product":"litemall","kev":false,"epss":0.00585,"kevAdded":null,"exploit":true},{"id":"CVE-2025-8965","published":"2025-08-14T15:32:06.048Z","updated":"2025-08-14T17:38:41.755Z","title":"linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload","severity":"MEDIUM","score":5.3,"vendor":"linlinjava","product":"litemall","kev":false,"epss":0.00413,"kevAdded":null,"exploit":true},{"id":"CVE-2025-8764","published":"2025-08-09T18:32:06.025Z","updated":"2025-08-12T16:04:47.459Z","title":"linlinjava litemall upload unrestricted upload","severity":"MEDIUM","score":5.3,"vendor":"linlinjava","product":"litemall","kev":false,"epss":0.00282,"kevAdded":null,"exploit":true},{"id":"CVE-2025-8753","published":"2025-08-09T13:32:05.447Z","updated":"2025-08-12T16:05:36.510Z","title":"linlinjava litemall File delete path traversal","severity":"MEDIUM","score":5.3,"vendor":"linlinjava","product":"litemall","kev":false,"epss":0.00562,"kevAdded":null,"exploit":true},{"id":"CVE-2025-6702","published":"2025-06-26T16:00:16.356Z","updated":"2025-06-27T13:18:23.188Z","title":"linlinjava litemall post improper authorization","severity":"MEDIUM","score":5.3,"vendor":"linlinjava","product":"litemall","kev":false,"epss":0.004,"kevAdded":null,"exploit":true},{"id":"CVE-2024-6452","published":"2024-07-02T20:00:05.322Z","updated":"2024-08-01T21:41:03.400Z","title":"linlinjava litemall AdminGoodscontroller.java sql injection","severity":"MEDIUM","score":5.3,"vendor":"linlinjava","product":"litemall","kev":false,"epss":0.00475,"kevAdded":null,"exploit":true}]}