What’s Vulnerable › Products

feelec-yishu feelcrm-os vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your feelec-yishu feelcrm-os version is affected

Latest feelec-yishu feelcrm-os vulnerabilities

• CVE-2026-105389 — feelec-yishu feelcrm-os UploadTicketFile Endpoint UploadController.class.php unrestricted upload (CVSS 6.3)
• CVE-2026-105388 — feelec-yishu feelcrm-os Member Endpoint MemberController.class.php index sql injection (CVSS 6.3)
• CVE-2026-105291 — feelec-yishu feelcrm-os Department Search Endpoint GroupController.class.php index cross site scripting (CVSS 4.3)
• CVE-2026-105290 — feelec-yishu feelcrm-os getCurlData Endpoint GoogleController.class.php server-side request forgery (CVSS 7.3)
• CVE-2026-105289 — feelec-yishu feelcrm-os Create Customer Endpoint CrmDefineFormModel.class.php htmlspecialchars_decode cross site scripting (CVSS 3.5)
• CVE-2026-105288 — feelec-yishu feelcrm-os Crm Endpoint functions.php index cross site scripting (CVSS 4.3)
• CVE-2026-105287 — feelec-yishu feelcrm-os getMemberByGroups Endpoint AjaxRequestController.class.php sql injection (CVSS 6.3)