CVE-2026-110122

PickMall lilishop (through version 4.4 ) is vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability. The issue resides in the GoodsServiceImpl.freight and GoodsSkuServiceImpl.freight methods, which update goods and SKUs by ID without performing necessary store-scoped checks . This ...