agentprime: guchengwuyue-yshop-crmEvery new CVE for guchengwuyue-yshop-crm.https://agentprime.io/CVE-2026-111703: yshop-crm through 2.1.3 IDOR via CRM customer by-id endpointshttps://agentprime.io/advisories/CVE-2026-111703/https://agentprime.io/advisories/CVE-2026-111703/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 17:39:55 GMTCVECVE-2026-109173: yshop-crm through 2.1.3 Missing Authorization via invoice check endpointhttps://agentprime.io/advisories/CVE-2026-109173/https://agentprime.io/advisories/CVE-2026-109173/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 13:10:34 GMTCVECVE-2026-109172: yshop-crm through 2.1.3 Missing Authorization via contract-receivables check endpointhttps://agentprime.io/advisories/CVE-2026-109172/https://agentprime.io/advisories/CVE-2026-109172/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 13:10:34 GMTCVECVE-2026-109171: yshop-crm through 2.1.3 Missing Authorization via /admin-api/crm/contract/checkhttps://agentprime.io/advisories/CVE-2026-109171/https://agentprime.io/advisories/CVE-2026-109171/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 13:10:33 GMTCVECVE-2026-92463: yshop-crm through 2.1.3 Missing Authorization via Disabled Annotation on System User Listinghttps://agentprime.io/advisories/CVE-2026-92463/https://agentprime.io/advisories/CVE-2026-92463/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 11:07:31 GMTCVECVE-2026-92462: yshop-crm through 2.1.3 Missing Authorization via CrmFlowController deleteFlowStephttps://agentprime.io/advisories/CVE-2026-92462/https://agentprime.io/advisories/CVE-2026-92462/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 11:07:30 GMTCVECVE-2026-92461: yshop-crm through 2.1.3 Missing Authorization via CRM Approval-Chain Endpointhttps://agentprime.io/advisories/CVE-2026-92461/https://agentprime.io/advisories/CVE-2026-92461/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 11:07:30 GMTCVECVE-2026-92460: yshop-crm through 2.1.3 Missing Authorization via CRM Operation-Log Listinghttps://agentprime.io/advisories/CVE-2026-92460/https://agentprime.io/advisories/CVE-2026-92460/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 11:07:29 GMTCVECVE-2026-92459: yshop-crm through 2.1.3 Missing Authorization via CRM Lead-Claim Endpointhttps://agentprime.io/advisories/CVE-2026-92459/https://agentprime.io/advisories/CVE-2026-92459/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 11:07:28 GMTCVECVE-2026-92458: yshop-crm through 2.1.3 Missing Authorization via StoreProductController onSalehttps://agentprime.io/advisories/CVE-2026-92458/https://agentprime.io/advisories/CVE-2026-92458/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 11:07:28 GMTCVECVE-2026-92457: yshop-crm through 2.1.3 Missing Authorization via CrmInvoiceController issueInvoicehttps://agentprime.io/advisories/CVE-2026-92457/https://agentprime.io/advisories/CVE-2026-92457/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 11:07:27 GMTCVECVE-2026-92456: yshop-crm through 2.1.3 Missing Authorization via CRM Customer Rule-Configuration Endpointshttps://agentprime.io/advisories/CVE-2026-92456/https://agentprime.io/advisories/CVE-2026-92456/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 11:07:26 GMTCVECVE-2026-92455: yshop-crm through 2.1.3 Missing Authorization via CRM Customer Messaging Endpointshttps://agentprime.io/advisories/CVE-2026-92455/https://agentprime.io/advisories/CVE-2026-92455/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 11:07:26 GMTCVE