Security Advisory

CVE-2025-48299

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-07-16 10:36:53
Last updated 2026-04-28 16:12:55
Assigner Patchstack
State PUBLISHED

Description

Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) vulnerability in YayCommerce YayExtra yayextra allows SQL Injection.This issue affects YayExtra: from n/a through <= 1.5.5.