guchengwuyue yshopmall

• CVE-2026-110120 Medium 5.4 yshopmall through 2.0.0 IDOR via After-Sales API in StoreAfterSalesController 0.2%
• CVE-2026-110119 High 7.1 yshopmall through 2.0.0 IDOR via Member Address API in UserAddressController 0.3%
• CVE-2026-2146 Medium 6.3 guchengwuyue yshopmall co.yixiang.utils.FileUtil updateAvatar unrestricted upload 0.3%
• CVE-2025-15496 Medium 6.3 guchengwuyue yshopmall jobs getPage sql injection 0.4%