Skip to content
OpenAdvisories

Vendor

yaojingang

4 known vulnerabilities.

Products

GEOFlow 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-82667

    yaojingang GEOFlow GenericHttpEndpointResolver.php DistributionController.isValidHttpEndpoint server-side request forgery

    A vulnerability has been found in yaojingang GEOFlow up to 2.1.0. Impacted is the function DistributionController.isValidHttpEndpoint of the file app/Services/GeoFlow/GenericHttpEndpointResolver.php. Such manipulation of the argument endpoint_url leads to ser…

    yaojingang GEOFlow
  • Medium 4.7
    CVE-2026-82666

    yaojingang GEOFlow Superadmin Theme Editor SiteThemeEditorController.php preview code injection

    A flaw has been found in yaojingang GEOFlow up to 2.1.0. This issue affects the function preview of the file app/Http/Controllers/Admin/SiteThemeEditorController.php of the component Superadmin Theme Editor. This manipulation of the argument blade causes code…

    yaojingang GEOFlow
  • Medium 4.3
    CVE-2026-82664

    yaojingang GEOFlow JSON-LD Theme HomeController.php cross site scripting

    A security vulnerability has been detected in yaojingang GEOFlow up to 2.1.0. This affects an unknown part of the file app/Http/Controllers/Site/HomeController.php of the component JSON-LD Theme Handler. The manipulation of the argument Search leads to cross …

    yaojingang GEOFlow