edumall vulnerabilities
CVEs whose affected-version data names the edumall package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-39748High· 7.1Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 versions.
Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 versions.
▾ TwilightThemeMove · edumallEPSS 0.23%via NVD
CVE-2025-59564High· 8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove EduMall edumall allows PHP Local File Inclusion.This issue affects EduMall: from n/a through < 4.4.5.
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove EduMall edumall allows PHP Local File Inclusion.This issue affects EduMall: from n/a through < 4.4.5.
▾ Twilightthememove · edumallEPSS 0.53%via NVD