lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturing and sending the data packets for coupon collection in high concurrency.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Lilishop | Pickmall | * | 4.2.4 (including) |