CVE-2021-26617: Firstmall

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

This issues due to insufficient verification of the various input values from user’s input. The vulnerability allows remote attackers to execute malicious code in Firstmall via navercheckout_add function.

Affected products

• Firstmall Firstmall: affected versions not specified

Published 2022-02-25. Last modified 2026-06-17.