litemall 产品相关 8 条漏洞，AI 中文标题与摘要、CVSS、POC 一站汇总。
ベンダー: linlinjava
| CVE ID | タイトル | CVSS | 深刻度 | 公開日 |
|---|---|---|---|---|
| CVE-2025-10291 | linlinjava litemall cancel WxAftersaleController improper authorization CWE-285 | 6.3 | Medium | 2025-09-12 |
| CVE-2025-8991 | linlinjava litemall Business Logic express logic error CWE-840 | 4.3 | Medium | 2025-08-15 |
| CVE-2025-8974 | linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials CWE-798 | 3.7 | Low | 2025-08-14 |
| CVE-2025-8965 | linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload CWE-434 | 6.3 | Medium | 2025-08-14 |
| CVE-2025-8764 | linlinjava litemall upload unrestricted upload CWE-434 | 6.3 | Medium | 2025-08-09 |
| CVE-2025-8753 | linlinjava litemall File delete path traversal CWE-22 | 5.4 | Medium | 2025-08-09 |
| CVE-2025-6702 | linlinjava litemall post improper authorization CWE-285 | 4.3 | Medium | 2025-06-26 |
| CVE-2024-6452 | linlinjava litemall AdminGoodscontroller.java sql injection CWE-89 | 6.3 | Medium | 2024-07-02 |
litemall 产品累计公开 8 条 CVE 漏洞，本页提供按时间倒序的完整列表，包含 CVSS、CWE、AI 中文摘要与可获取的 POC 链接。