CVE-2024-50654

7.5 highEPSS 1.6%

High (7.5) in pickmall lilishop. EPSS 1.6% chance of exploitation in the next 30 days.

lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturing and sending the data packets for coupon collection in high concurrency.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-346
Published: 2024-11-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pickmall:lilishop

References

https://github.com/Yllxx03/CVE/blob/main/lilishop/CouponLogicVulnerability.md
https://github.com/Yllxx03/CVE/tree/main/CVE-2024-50654

Check your stack JSON