CVE-2021-26631: Mangboard Commerce

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Improper input validation vulnerability in Mangboard commerce package could lead to occur for abnormal request. A remote attacker can exploit this vulnerability to manipulate the total order amount into a negative number and then pay for the order.

Affected products

• Mangboard Commerce: before 1.3.9 (fixed in 1.3.9)

Published 2022-05-19. Last modified 2026-06-17.