CVE-2021-26617

9.8 criticalEPSS 1.3%

Critical (9.8) in firstmall firstmall. EPSS 1.3% chance of exploitation in the next 30 days.

This issues due to insufficient verification of the various input values from user’s input. The vulnerability allows remote attackers to execute malicious code in Firstmall via navercheckout_add function.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2022-02-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

firstmall:firstmall

References

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36469
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36469

Check your stack JSON