feelec-yishu feelcrm-os

• CVE-2026-105389 Medium 6.3 feelec-yishu feelcrm-os UploadTicketFile Endpoint UploadController.class.php unrestricted upload 0.2%
• CVE-2026-105388 Medium 6.3 feelec-yishu feelcrm-os Member Endpoint MemberController.class.php index sql injection 0.2%
• CVE-2026-105291 Medium 4.3 feelec-yishu feelcrm-os Department Search Endpoint GroupController.class.php index cross site scripting 0.3%
• CVE-2026-105290 High 7.3 feelec-yishu feelcrm-os getCurlData Endpoint GoogleController.class.php server-side request forgery 0.3%
• CVE-2026-105289 Low 3.5 feelec-yishu feelcrm-os Create Customer Endpoint CrmDefineFormModel.class.php htmlspecialchars_decode cross site scripting 0.2%
• CVE-2026-105288 Medium 4.3 feelec-yishu feelcrm-os Crm Endpoint functions.php index cross site scripting 0.3%
• CVE-2026-105287 Medium 6.3 feelec-yishu feelcrm-os getMemberByGroups Endpoint AjaxRequestController.class.php sql injection 0.3%