Improper Authorization Vulnerability in linlinjava litemall Software

CVE-2025-10291

What is CVE-2025-10291?

A vulnerability has been discovered in the linlinjava litemall application, specifically in the WxAftersaleController function located in the /wx/aftersale/cancel file. This weakness arises from inadequate authorization checks when processing the argument ID, which can allow attackers to perform unauthorized actions remotely. The vulnerability poses a significant risk as exploits have already been made public and could be readily leveraged by malicious actors. The vendor has been notified about the issue but has failed to respond.

References