Vendors / guchengwuyue Records 19 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 8
Exploited now guchengwuyue records in CISA KEV No guchengwuyue vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01009 · Published 2024-11-15 · No fix listed CWE-22
Priority HIGH 67
yshopmall <=v1.9.0 is vulnerable to SQL Injection in the image listing interface.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00442 · Published 2025-03-04 · No fix listed CWE-89
Priority MEDIUM 57
A security flaw has been discovered in guchengwuyue yshopmall up to 1.9.1.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00331 · Published 2026-02-08 · No fix listed CWE-284
Priority MEDIUM 57
A vulnerability was determined in guchengwuyue yshopmall up to 1.9.1.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00387 · Published 2026-01-09 · No fix listed CWE-74
Open these records in search → All records by CVSS severity
1 8 10 0 0
