linlinjava litemall Improper Authorization Vulnerability in wx/comment/post Endpoint

A vulnerability allowing improper authorization has been identified in linlinjava litemall version 1.8.0. The issue arises in the wx/comment/post endpoint, where the adminComment argument is not properly validated, enabling unauthorized users to manipulate comments as if they were administrators. This vulnerability can be exploited remotely and has been publicly disclosed, with known technical details and a proof-of-concept exploit available.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed, such as forging administrator comments. This could facilitate social engineering attacks by misleading users, promoting fake offers or scams, and disseminating malicious links or viruses.