Guchengwuyue Yshopmall — known CVE vulnerabilities

Every CVE whose affected-product data names Guchengwuyue Yshopmall, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2024-50648 — CVSS 9.8 (critical): yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to…
• CVE-2025-25426 — CVSS 7.2 (high): yshopmall <=v1.9.0 is vulnerable to SQL Injection in the image listing interface.
• CVE-2025-15496 — CVSS 6.3 (medium): A vulnerability was determined in guchengwuyue yshopmall up to 1.9.1. Affected is the function getPage of the file /api/jobs. This…
• CVE-2026-2146 — CVSS 6.3 (medium): A security flaw has been discovered in guchengwuyue yshopmall up to 1.9.1. This affects the function updateAvatar of the file…