Unknown · Weitong Mall · CVE-2025-4136
**Name of the Vulnerable Software and Affected Versions**
Weitong Mall version 1.0.0
**Description**
A critical issue was found in the Sale Endpoint component, where the manipulation of the `ID` argument leads to improper authorization. This issue can be exploited remotely. The exploit has been disclosed to the public.
**Recommendations**
For Weitong Mall version 1.0.0, as a temporary workaround, consider restricting access to the Sale Endpoint component until a patch is available. Avoid using the `ID` argument in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.