Advisories · Technology

YayPricing.

Every CVE that names YayPricing among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-87888 CVE record

CVSS 8.0 High

YayPricing < 3.5.7 - Subscriber+ Stored XSS via save_page_data REST Route
- YayPricing
- Cross-site scripting (XSS)
Not analysed yet 12 Sept 2026
CVE-2026-15230 CVE record

CVSS 8.1 High

YayPricing < 3.5.7 - Subscriber+ Pricing Configuration Modification and Coupon Code Disclosure
- YayPricing
- Broken access control
Not analysed yet 5 Aug 2026