[ Vendor · 6 CVEs ]
guchengwuyue
CVEs affecting guchengwuyue published in the last 30 days, plus any guchengwuyue CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111703 | 16 Oct 2026 | CVSS 6.3 | guchengwuyue yshop-crmyshop-crm through 2.1.3 contains an insecure direct object reference vulnerability that allows authenticated sales users to access other users'… | |
| CVE-2026-110119 | 13 Oct 2026 | CVSS 7.1 | guchengwuyue yshopmallYshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows authenticated members to… | |
| CVE-2026-110120 | 13 Oct 2026 | CVSS 5.4 | guchengwuyue yshopmallYshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the after-sales API that allows authenticated members to access… | |
| CVE-2026-109171 | 12 Oct 2026 | CVSS 4.3 | guchengwuyue yshop-crmyshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject contracts… | |
| CVE-2026-109172 | 12 Oct 2026 | CVSS 4.3 | guchengwuyue yshop-crmyshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject… | |
| CVE-2026-109173 | 12 Oct 2026 | CVSS 4.3 | guchengwuyue yshop-crmyshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject invoices… |