Yiovo Firefly Mall
2 CVEs affecting Yiovo Firefly Mall. Latest disclosed: 2025-10-02. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-56161 | High | 7.5 | 2025-10-02 | YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User m… |
CVE-2025-56162 | Medium | 6.5 | 2025-10-02 | YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates… |