agentprime: feelec-yishu-feelcrm-osEvery new CVE for feelec-yishu-feelcrm-os.https://agentprime.io/CVE-2026-105389: feelec-yishu feelcrm-os UploadTicketFile Endpoint UploadController.class.php unrestricted uploadhttps://agentprime.io/advisories/CVE-2026-105389/https://agentprime.io/advisories/CVE-2026-105389/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 19:30:12 GMTCVECVE-2026-105388: feelec-yishu feelcrm-os Member Endpoint MemberController.class.php index sql injectionhttps://agentprime.io/advisories/CVE-2026-105388/https://agentprime.io/advisories/CVE-2026-105388/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 19:15:14 GMTCVECVE-2026-105291: feelec-yishu feelcrm-os Department Search Endpoint GroupController.class.php index cross site scriptinghttps://agentprime.io/advisories/CVE-2026-105291/https://agentprime.io/advisories/CVE-2026-105291/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 10:45:11 GMTCVECVE-2026-105290: feelec-yishu feelcrm-os getCurlData Endpoint GoogleController.class.php server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-105290/https://agentprime.io/advisories/CVE-2026-105290/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 10:30:15 GMTCVECVE-2026-105289: feelec-yishu feelcrm-os Create Customer Endpoint CrmDefineFormModel.class.php htmlspecialchars_decode cross site scriptinghttps://agentprime.io/advisories/CVE-2026-105289/https://agentprime.io/advisories/CVE-2026-105289/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 10:15:16 GMTCVECVE-2026-105288: feelec-yishu feelcrm-os Crm Endpoint functions.php index cross site scriptinghttps://agentprime.io/advisories/CVE-2026-105288/https://agentprime.io/advisories/CVE-2026-105288/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 10:00:10 GMTCVECVE-2026-105287: feelec-yishu feelcrm-os getMemberByGroups Endpoint AjaxRequestController.class.php sql injectionhttps://agentprime.io/advisories/CVE-2026-105287/https://agentprime.io/advisories/CVE-2026-105287/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 09:45:12 GMTCVE