CVE-2026-75308 | yshopmall up to 3.3 File Upload /api/upload cross site scripting

A vulnerability classified as problematic has been found in yshopmall up to 3.3. This issue affects some unknown processing of the file /api/upload of the component File Upload. This manipulation causes cross site scripting.

This vulnerability is handled as CVE-2026-75308. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More