Guchengwuyue Yshopmall
4 CVEs affecting Guchengwuyue Yshopmall. Latest disclosed: 2026-02-08. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-50648 | Critical | 9.8 | 2024-11-15 | yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files. |
CVE-2025-25426 | High | 7.2 | 2025-03-04 | yshopmall <=v1.9.0 is vulnerable to SQL Injection in the image listing interface. |
CVE-2026-2146 | Medium | 6.3 | 2026-02-08 | A security flaw has been discovered in guchengwuyue yshopmall up to 1.9.1. This affects the function updateAvatar of the file /api/users/updateAvatar of the co… |
CVE-2025-15496 | Medium | 6.3 | 2026-01-09 | A vulnerability was determined in guchengwuyue yshopmall up to 1.9.1. Affected is the function getPage of the file /api/jobs. This manipulation of the argument… |