YS
Product
yshopmall
6
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 2High 3Medium 1Low 0
Watch
Add yshopmall to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-2146 | 8.8 | Feb 8 | guchengwuyue yshopmall co.yixiang.utils.FileUtil updateAvatar unrestricted upload Affected: 1.9.0; 1.9.1 |
| CVE-2025-25426 | 7.2 | Mar 4 | yshopmall <=v1.9.0 is vulnerable to SQL Injection in the image listing interface Affected: through 1.9.0 |
| CVE-2026-110119 | 7.1 | Oct 13 | yshopmall through 2.0.0 IDOR via Member Address API in UserAddressController Affected: through 2.0.0 |
Showing 3