Security Advisory
CVE-2025-28399
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the updateAddress method of the Address Controller class.