What’s Vulnerable › Products

youlaitech youlai-mall vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your youlaitech youlai-mall version is affected

Latest youlaitech youlai-mall vulnerabilities

• CVE-2026-3287 — youlaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injection (CVSS 9.8)
• CVE-2025-15087 — youlaitech youlai-mall OrderController.java submitOrderPayment improper authorization (CVSS 4.3)
• CVE-2025-15086 — youlaitech youlai-mall MemberController.java getMemberByMobile access control (CVSS 4.3)
• CVE-2025-15085 — youlaitech youlai-mall Balance MemberController.java deductBalance improper authorization (CVSS 8.1)
• CVE-2025-15084 — youlaitech youlai-mall Order Payment OrderController.java orderService.payOrder access control (CVSS 3.1)
• CVE-2025-14086 — youlaitech youlai-mall openid access control (CVSS 8.8)
• CVE-2025-14085 — youlaitech youlai-mall orders improper control of dynamically-identified variables (CVSS 8.8)
• CVE-2025-14052 — youlaitech youlai-mall members getMemberById access control (CVSS 6.5)
• CVE-2025-14051 — youlaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variables (CVSS 8.8)