What’s Vulnerable › Products

guchengwuyue yshop-crm vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.

Check whether your guchengwuyue yshop-crm version is affected

Latest guchengwuyue yshop-crm vulnerabilities

• CVE-2026-111703 — yshop-crm through 2.1.3 IDOR via CRM customer by-id endpoints (CVSS 6.3)
• CVE-2026-109173 — yshop-crm through 2.1.3 Missing Authorization via invoice check endpoint (CVSS 4.3)
• CVE-2026-109172 — yshop-crm through 2.1.3 Missing Authorization via contract-receivables check endpoint (CVSS 4.3)
• CVE-2026-109171 — yshop-crm through 2.1.3 Missing Authorization via /admin-api/crm/contract/check (CVSS 4.3)
• CVE-2026-92463 — yshop-crm through 2.1.3 Missing Authorization via Disabled Annotation on System User Listing (CVSS 6.5)
• CVE-2026-92462 — yshop-crm through 2.1.3 Missing Authorization via CrmFlowController deleteFlowStep (CVSS 6.5)
• CVE-2026-92461 — yshop-crm through 2.1.3 Missing Authorization via CRM Approval-Chain Endpoint (CVSS 4.3)
• CVE-2026-92460 — yshop-crm through 2.1.3 Missing Authorization via CRM Operation-Log Listing (CVSS 6.5)
• CVE-2026-92459 — yshop-crm through 2.1.3 Missing Authorization via CRM Lead-Claim Endpoint (CVSS 6.5)
• CVE-2026-92458 — yshop-crm through 2.1.3 Missing Authorization via StoreProductController onSale (CVSS 4.3)
• CVE-2026-92457 — yshop-crm through 2.1.3 Missing Authorization via CrmInvoiceController issueInvoice (CVSS 6.5)
• CVE-2026-92456 — yshop-crm through 2.1.3 Missing Authorization via CRM Customer Rule-Configuration Endpoints (CVSS 7.1)
• CVE-2026-92455 — yshop-crm through 2.1.3 Missing Authorization via CRM Customer Messaging Endpoints (CVSS 4.3)