CVE-2024-50654: Pickmall Lilishop

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturing and sending the data packets for coupon collection in high concurrency.

Affected products

• Pickmall Lilishop: up to and including 4.2.4

Published 2024-11-15. Last modified 2026-06-17.