PatchTheCVEexrick vulnerabilities
Recent CVEs affecting exrick products. 8 tracked.
exrick has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-01-12. Highest priority: CVE-2024-24112 (score 66/100).
- CVE-2025-8528 LOW 3.7 UPGRADE A vulnerability classified as problematic has been found in Exrick xboot up to 3.3.4
- CVE-2025-8527 MEDIUM 6.3 UPGRADE A vulnerability was found in Exrick xboot up to 3.3.4
- CVE-2025-8526 MEDIUM 6.3 UPGRADE A vulnerability was found in Exrick xboot up to 3.3.4
- CVE-2025-8525 MEDIUM 5.3 UPGRADE A vulnerability was found in Exrick xboot up to 3.3.4
- CVE-2025-65540 MEDIUM 6.1 DOWNGRADE Multiple Cross-Site Scripting (XSS) vulnerabilities exist in xmall v1.1 due to improper handling of user-suppl
- CVE-2025-28399 CRITICAL 9.8 DOWNGRADE An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the updateAddress
- CVE-2024-24112 CRITICAL 9.8 DOWNGRADE xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter.
- CVE-2023-36331 HIGH 8.2 DOWNGRADE Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to arbitrarily access oth
FAQ
How do I fix exrick vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is exrick being exploited right now?
None of the tracked exrick CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which exrick CVE should I patch first?
CVE-2024-24112 currently ranks highest (66/100): xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter..