What’s Vulnerable › Products

guchengwuyue yshopmall vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your guchengwuyue yshopmall version is affected

Latest guchengwuyue yshopmall vulnerabilities

• CVE-2026-110120 — yshopmall through 2.0.0 IDOR via After-Sales API in StoreAfterSalesController (CVSS 5.4)
• CVE-2026-110119 — yshopmall through 2.0.0 IDOR via Member Address API in UserAddressController (CVSS 7.1)
• CVE-2026-2146 — guchengwuyue yshopmall co.yixiang.utils.FileUtil updateAvatar unrestricted upload (CVSS 8.8)
• CVE-2025-15496 — guchengwuyue yshopmall jobs getPage sql injection (CVSS 9.8)
• CVE-2025-25426 — (CVSS 7.2)
• CVE-2024-50648 — (CVSS 9.8)