CVE-2026-110119 | guchengwuyue Yshopmall up to 2.0.0 Member Address API /address/detail id resource injection

October 13, 2026 Yanac

A vulnerability was found in guchengwuyue Yshopmall up to 2.0.0. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the file /address/detail of the component Member Address API. This manipulation of the argument ID causes improper control of resource identifiers.

This vulnerability is registered as CVE-2026-110119. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More