Advisories · Technology
yaojingang GEOFlow.
Every CVE that names yaojingang GEOFlow among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
yaojingang GEOFlow GenericHttpEndpointResolver.php DistributionController.isValidHttpEndpoint server-side request forgery
- yaojingang GEOFlow
- Server-side request forgery (SSRF)
- CVSS 5.1 Medium
yaojingang GEOFlow Superadmin Theme Editor SiteThemeEditorController.php preview code injection
- yaojingang GEOFlow
- Other injection
- Code injection
- CVSS 5.1 Medium
yaojingang GEOFlow Image Library Cleanup ImageLibraryController.php unlink path traversal
- yaojingang GEOFlow
- Path traversal
- CVSS 5.3 Medium
yaojingang GEOFlow JSON-LD Theme HomeController.php cross site scripting
- yaojingang GEOFlow
- Cross-site scripting (XSS)
- Code injection