CVE-2025-13443

Name of the Vulnerable Software and Affected Versions macrozheng mall versions up to 1.0.3

Description A flaw exists in the delete function located at the ''/member/readHistory/delete'' endpoint. Manipulation of the ids argument can lead to improper access controls. Remote exploitation is possible, and the exploit is publicly available.

Recommendations Versions prior to 1.0.3 should be updated. As a temporary workaround, restrict access to the ''/member/readHistory/delete'' endpoint until a patch is available.