Login Request a demo
YS
Product
yshop-crm
by guchengwuyue · last CVE Oct 16, 2026
13
CVEs
0
On KEV
7.1
Max CVSS
4
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 0High 1Medium 12Low 0
Severity
All severities13Critical0High1Medium12Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add yshop-crm to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-92463
6.5
0%
Sep 16
yshop-crm through 2.1.3 Missing Authorization via Disabled Annotation on System User Listing
Affected: through 2.1.3
CVE-2026-92462
6.5
0%
Sep 16
yshop-crm through 2.1.3 Missing Authorization via CrmFlowController deleteFlowStep
Affected: through 2.1.3
CVE-2026-92460
6.5
0%
Sep 16
yshop-crm through 2.1.3 Missing Authorization via CRM Operation-Log Listing
Affected: through 2.1.3
CVE-2026-92459
6.5
0%
Sep 16
yshop-crm through 2.1.3 Missing Authorization via CRM Lead-Claim Endpoint
Affected: through 2.1.3
CVE-2026-92457
6.5
0%
Sep 16
yshop-crm through 2.1.3 Missing Authorization via CrmInvoiceController issueInvoice
Affected: through 2.1.3
CVE-2026-111703
6.3
0%
Oct 16
yshop-crm through 2.1.3 IDOR via CRM customer by-id endpoints
Affected: through 2.1.3
CVE-2026-109173
4.3
0%
Oct 12
yshop-crm through 2.1.3 Missing Authorization via invoice check endpoint
Affected: through 2.1.3
CVE-2026-109172
4.3
0%
Oct 12
yshop-crm through 2.1.3 Missing Authorization via contract-receivables check endpoint
Affected: through 2.1.3
CVE-2026-109171
4.3
0%
Oct 12
yshop-crm through 2.1.3 Missing Authorization via /admin-api/crm/contract/check
Affected: through 2.1.3
CVE-2026-92461
4.3
0%
Sep 16
yshop-crm through 2.1.3 Missing Authorization via CRM Approval-Chain Endpoint
Affected: through 2.1.3
CVE-2026-92458
4.3
0%
Sep 16
yshop-crm through 2.1.3 Missing Authorization via StoreProductController onSale
Affected: through 2.1.3
CVE-2026-92455
4.3
0%
Sep 16
yshop-crm through 2.1.3 Missing Authorization via CRM Customer Messaging Endpoints
Affected: through 2.1.3
Showing 12