Account Deletion Vulnerability in CE Phoenix eCommerce Platform

CVE-2025-47272

What is CVE-2025-47272?

The CE Phoenix eCommerce platform has a security flaw that allows logged-in users to delete their accounts without needing to re-enter their passwords. This vulnerability can be exploited if an attacker gains temporary access to an authenticated session, such as on a shared or public device. Consequently, users could lose their accounts and experience significant data loss. The issue was resolved in version 1.1.0.3, so users are advised to upgrade to this version or later to safeguard their accounts.

References