Skip to contentGuchengwuyue vulnerabilities
Newest
- guchengwuyue yshop-crmyshop-crm through 2.1.3 IDOR via CRM customer by-id endpointsCVE-2026-1117035.3 Medium
- guchengwuyue yshopmallyshopmall through 2.0.0 IDOR via After-Sales API in StoreAfterSalesControllerCVE-2026-1101205.3 Medium
- guchengwuyue yshopmallyshopmall through 2.0.0 IDOR via Member Address API in UserAddressControllerCVE-2026-1101197.1 High
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via invoice check endpointCVE-2026-1091735.3 Medium
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via contract-receivables check endpointCVE-2026-1091725.3 Medium
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via /admin-api/crm/contract/checkCVE-2026-1091715.3 Medium
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via Disabled Annotation on System User ListingCVE-2026-924637.1 High
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via CrmFlowController deleteFlowStepCVE-2026-924627.1 High
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via CRM Approval-Chain EndpointCVE-2026-924615.3 Medium
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via CRM Operation-Log ListingCVE-2026-924607.1 High
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via CRM Lead-Claim EndpointCVE-2026-924597.1 High
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via StoreProductController onSaleCVE-2026-924585.3 Medium
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via CrmInvoiceController issueInvoiceCVE-2026-924577.1 High
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via CRM Customer Rule-Configuration EndpointsCVE-2026-924567.1 High
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via CRM Customer Messaging EndpointsCVE-2026-924555.3 Medium
- guchengwuyue yshopmallguchengwuyue yshopmall co.yixiang.utils.FileUtil updateAvatar unrestricted uploadCVE-2026-21465.3 Medium
- guchengwuyue yshopmallguchengwuyue yshopmall jobs getPage sql injectionCVE-2025-154965.3 Medium
- guchengwuyue yshopmallyshopmall <=v1.9.0 is vulnerable to SQL Injection in the image listing interface.CVE-2025-254267.2 High
- guchengwuyue yshopmallyshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over...CVE-2024-506489.8 Critical