Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

yshop-crm — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in yshop-crm, with AI-generated Chinese analysis, references, and POCs.

Vendor: guchengwuyue

CVE ID Title CVSS Severity Published
CVE-2026-92463 yshop-crm through 2.1.3 Missing Authorization via Disabled Annotation on System User Listing CWE-862 6.5 Medium 2026-09-16
CVE-2026-92462 yshop-crm through 2.1.3 Missing Authorization via CrmFlowController deleteFlowStep CWE-862 6.5 Medium 2026-09-16
CVE-2026-92461 yshop-crm through 2.1.3 Missing Authorization via CRM Approval-Chain Endpoint CWE-862 4.3 Medium 2026-09-16
CVE-2026-92460 yshop-crm through 2.1.3 Missing Authorization via CRM Operation-Log Listing CWE-862 6.5 Medium 2026-09-16
CVE-2026-92459 yshop-crm through 2.1.3 Missing Authorization via CRM Lead-Claim Endpoint CWE-862 6.5 Medium 2026-09-16
CVE-2026-92458 yshop-crm through 2.1.3 Missing Authorization via StoreProductController onSale CWE-862 4.3 Medium 2026-09-16
CVE-2026-92456 yshop-crm through 2.1.3 Missing Authorization via CRM Customer Rule-Configuration Endpoints CWE-862 7.1 High 2026-09-16
CVE-2026-92457 yshop-crm through 2.1.3 Missing Authorization via CrmInvoiceController issueInvoice CWE-862 6.5 Medium 2026-09-16
CVE-2026-92455 yshop-crm through 2.1.3 Missing Authorization via CRM Customer Messaging Endpoints CWE-862 4.3 Medium 2026-09-16

All 9 known CVE vulnerabilities affecting yshop-crm with full Chinese analysis, references, and POCs where available.