Vulnerabilities in youlaitech
14 resultsCVE-2025-14051MEDIUMyoulaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variablesEPSS 0.5%CVE-2026-110215HIGHyoulai-boot through 2.21.1 Missing Authorization in Role Menu Assignment Allows Privilege EscalationEPSS 0.5%CVE-2026-110216HIGHyoulai-boot through 2.21.1 Missing Authorization in User Status Update EndpointEPSS 0.4%CVE-2025-14085MEDIUMyoulaitech youlai-mall orders improper control of dynamically-identified variablesEPSS 0.4%CVE-2026-3287MEDIUMyoulaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injectionEPSS 0.4%CVE-2026-110613HIGHyoulai-mall through commit 9f62de8 Order Information Disclosure via App Order ListEPSS 0.4%CVE-2025-14086MEDIUMyoulaitech youlai-mall openid access controlEPSS 0.3%CVE-2025-15085MEDIUMyoulaitech youlai-mall Balance MemberController.java deductBalance improper authorizationEPSS 0.3%CVE-2025-15086MEDIUMyoulaitech youlai-mall MemberController.java getMemberByMobile access controlEPSS 0.3%CVE-2025-15084LOWyoulaitech youlai-mall Order Payment OrderController.java orderService.payOrder access controlEPSS 0.3%CVE-2025-15372MEDIUMyoulaitech vue3-element-admin Notice index.vue cross site scriptingEPSS 0.3%CVE-2025-14052MEDIUMyoulaitech youlai-mall members getMemberById access controlEPSS 0.3%CVE-2025-15087MEDIUMyoulaitech youlai-mall OrderController.java submitOrderPayment improper authorizationEPSS 0.3%CVE-2026-7672MEDIUMyoulaitech youlai-boot Users Endpoint UserController.java getUserList sql injectionEPSS 0.2%