CVE-2025-56161

YOSHOP 2.0 is vulnerable to unauthenticated information disclosure via the comment-list API endpoints in the Goods module . The vulnerability exists because the Comment model eagerly loads the related User model without any field filtering. Since the User.php file lacks defined $hidden or $visibl...

CVE-2025-56162

YOSHOP version 2.0 is vulnerable to an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The root cause is the getListByIds function improperly concatenating user input into the orderRaw('field(goods_id, ...)') query. Attackers can exploit this to enume...