Erick xmall Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in Erick xmall versions through 1.1. The issue arises in the Address Controller class, where a remote attacker can exploit the updateAddress method to gain elevated privileges.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation.