CONTRACT DOES NOT SAVE DETAILS ABOUT ORDERS SO AN ATTACKER COULD COME UP WITH THEIR OWN BUY AND SELL ORDER AND EXECUTE IT

Lines of code Vulnerability details Impact Since the contract doesn't store any values other than cancelledOrderes, a malicious attacker can come up with an order for an NFT and executes it. Proof of Concept 1. User puts his NFT on sale for 10ETH approves contract 2. Malicious attacker calls the...