CVE-2021-26631

Publication date

2022-05-19 14:53:55

Family

krcert

State

PUBLISHED

Description

Improper input validation vulnerability in Mangboard commerce package could lead to occur for abnormal request. A remote attacker can exploit this vulnerability to manipulate the total order amount into a negative number and then pay for the order.