| Package | Affected versions | Patched versions |
|---|---|---|
| commerce | < 1.3.9 | 1.3.9 |
Improper input validation vulnerability in Mangboard commerce package could lead to occur for abnormal request. A remote attacker can exploit this vulnerability to manipulate the total order amount into a negative number and then pay for the order.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free