CVE-2024-57434: Macrozheng Mall-Tiny

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control. The project imports users by default, and the test user is made a super administrator.

Affected products

• Macrozheng Mall-Tiny: version 1.0.1 only

Published 2025-01-31. Last modified 2026-06-17.