Yiovo Firefly Mall vulnerabilities

• yiovo firefly mall YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api... CVE-2025-56162 6.5 MediumOctober 2, 2025
• yiovo firefly mall YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the... CVE-2025-56161 7.5 HighOctober 2, 2025