All 4 CVE vulnerabilities found in GEOFlow, with AI-generated Chinese analysis, references, and POCs.
Vendor: yaojingang
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-82667 | yaojingang GEOFlow GenericHttpEndpointResolver.php DistributionController.isValidHttpEndpoint server-side request forgery CWE-918 | 4.7 | Medium | 2026-08-31 |
| CVE-2026-82666 | yaojingang GEOFlow Superadmin Theme Editor SiteThemeEditorController.php preview code injection CWE-94 | 4.7 | Medium | 2026-08-31 |
| CVE-2026-82665 | yaojingang GEOFlow Image Library Cleanup ImageLibraryController.php unlink path traversal CWE-22 | 3.8 | Low | 2026-08-31 |
| CVE-2026-82664 | yaojingang GEOFlow JSON-LD Theme HomeController.php cross site scripting CWE-79 | 4.3 | Medium | 2026-08-31 |
All 4 known CVE vulnerabilities affecting GEOFlow with full Chinese analysis, references, and POCs where available.