Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11.
@huntrdev·CWE-1284·Published 2022-02-15
Microweber prior to version 1.2.11 can have a negative product amount. This could allow an attacker to manipulate the total value and get products for free.