CVE-2025-12854 | newbee-mall-plus up to 2.4.1 /seckillExecution/ executeSeckill userid authorization

A vulnerability was found in newbee-mall-plus up to 2.4.1. It has been rated as critical. This vulnerability affects the function executeSeckill of the file /seckillExecution/. The manipulation of the argument userid leads to authorization bypass.

This vulnerability is traded as CVE-2025-12854. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.