Login Request a demo
GU
Vendor
guchengwuyue
2 products with CVEs on record
19
CVEs
0
On KEV
6
New 30D
Products
YS
yshop-crm
guchengwuyue
7.1
13 CVEs0 on KEV4 new
YS
yshopmall
guchengwuyue
9.8
6 CVEs0 on KEV2 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-111703
YS
yshop-crm
guchengwuyue
6.3
0%
Oct 16yshop-crm through 2.1.3 IDOR via CRM customer by-id endpoints
CVE-2026-110120
YS
yshopmall
guchengwuyue
5.4
0%
Oct 13yshopmall through 2.0.0 IDOR via After-Sales API in StoreAfterSalesController
CVE-2026-110119
YS
yshopmall
guchengwuyue
7.1
0%
Oct 13yshopmall through 2.0.0 IDOR via Member Address API in UserAddressController
CVE-2026-109173
YS
yshop-crm
guchengwuyue
4.3
0%
Oct 12yshop-crm through 2.1.3 Missing Authorization via invoice check endpoint
CVE-2026-109172
YS
yshop-crm
guchengwuyue
4.3
0%
Oct 12yshop-crm through 2.1.3 Missing Authorization via contract-receivables check endpoint
CVE-2026-109171
YS
yshop-crm
guchengwuyue
4.3
0%
Oct 12yshop-crm through 2.1.3 Missing Authorization via /admin-api/crm/contract/check
CVE-2026-92463
YS
yshop-crm
guchengwuyue
6.5
0%
Sep 16yshop-crm through 2.1.3 Missing Authorization via Disabled Annotation on System User Listing
CVE-2026-92462
YS
yshop-crm
guchengwuyue
6.5
0%
Sep 16yshop-crm through 2.1.3 Missing Authorization via CrmFlowController deleteFlowStep
CVE-2026-92461
YS
yshop-crm
guchengwuyue
4.3
0%
Sep 16yshop-crm through 2.1.3 Missing Authorization via CRM Approval-Chain Endpoint
CVE-2026-92460
YS
yshop-crm
guchengwuyue
6.5
0%
Sep 16yshop-crm through 2.1.3 Missing Authorization via CRM Operation-Log Listing
CVE-2026-92459
YS
yshop-crm
guchengwuyue
6.5
0%
Sep 16yshop-crm through 2.1.3 Missing Authorization via CRM Lead-Claim Endpoint
CVE-2026-92458
YS
yshop-crm
guchengwuyue
4.3
0%
Sep 16yshop-crm through 2.1.3 Missing Authorization via StoreProductController onSale
CVE-2026-92457
YS
yshop-crm
guchengwuyue
6.5
0%
Sep 16yshop-crm through 2.1.3 Missing Authorization via CrmInvoiceController issueInvoice
CVE-2026-92456
YS
yshop-crm
guchengwuyue
7.1
0%
Sep 16yshop-crm through 2.1.3 Missing Authorization via CRM Customer Rule-Configuration Endpoints
CVE-2026-92455
YS
yshop-crm
guchengwuyue
4.3
0%
Sep 16yshop-crm through 2.1.3 Missing Authorization via CRM Customer Messaging Endpoints
CVE-2026-2146
YS
yshopmall
guchengwuyue
8.8
0%
Feb 8guchengwuyue yshopmall co.yixiang.utils.FileUtil updateAvatar unrestricted upload
CVE-2025-15496
YS
yshopmall
guchengwuyue
9.8
0%
Jan 9guchengwuyue yshopmall jobs getPage sql injection
CVE-2025-25426
YS
Yshopmall
Guchengwuyue
7.2
0%
Mar 4yshopmall <=v1.9.0 is vulnerable to SQL Injection in the image listing interface
CVE-2024-50648
YS
Yshopmall
Guchengwuyue
9.8
1%
Nov 15yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files