CVE-2025-50722

The open-source mall system sparkshop version 1.1.7 is impacted by an Insecure Permissions vulnerability in the Common.php component. This flaw allows a remote attacker to perform arbitrary code execution . While the technical details specify improper neutralization of special elements used in a ...