Login Request a demo
YS
Product
yshopmall
by guchengwuyue · last CVE Oct 13, 2026
6
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 2High 3Medium 1Low 0
Severity
All severities6Critical2High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add yshopmall to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-15496
9.8
0%
Jan 9
guchengwuyue yshopmall jobs getPage sql injection
Affected: 1.9.0; 1.9.1
CVE-2024-50648
9.8
1%
Nov 15
yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files
Affected: 1.0
CVE-2026-2146
8.8
0%
Feb 8
guchengwuyue yshopmall co.yixiang.utils.FileUtil updateAvatar unrestricted upload
Affected: 1.9.0; 1.9.1
CVE-2025-25426
7.2
0%
Mar 4
yshopmall <=v1.9.0 is vulnerable to SQL Injection in the image listing interface
Affected: through 1.9.0
CVE-2026-110119
7.1
0%
Oct 13
yshopmall through 2.0.0 IDOR via Member Address API in UserAddressController
Affected: through 2.0.0
CVE-2026-110120
5.4
0%
Oct 13
yshopmall through 2.0.0 IDOR via After-Sales API in StoreAfterSalesController
Affected: through 2.0.0
Showing 6