Yiovo

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Yiovo records in CISA KEV

No Yiovo vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2025-35267 CVE-2025-56162 · GHSA-wfc7-vvw3-2pq2

HIGH 70

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00492 Published 2025-10-02 No fix listed CWE-89

TI-2025-35266 CVE-2025-56161 · GHSA-m7xp-q497-c5g4

HIGH 66

YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00538 Published 2025-10-02 No fix listed CWE-200