{"cvss":9.8,"datePublished":"2026-09-14T00:00:00Z","dateUpdated":"2026-09-14T00:00:00Z","description":"xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter.","dueDate":"","id":"CVE-2024-24112","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"xmall","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"exrick xmall Improper Neutralization of Special Elements used in an SQL Command","vendor":"exrick"}