Yiovo vulnerabilities
We track 1 vulnerability in Yiovo products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 2, 2025.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Yiovo vulnerabilities
- 7.5 High severity
Firefly Mall: Exposure of Sensitive Information to an Unauthorized Actor
YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive f