TI-2026-20491 CVE-2026-25373 · GHSA-7xg6-gw64-jpqcCross-site scripting in ProgressionStudios VayvoPriority LOW 30Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ProgressionStudios Vayvo vayvo-progression allows Reflected XSS.This issue affects Vayvo: from n/a through < 6.8.CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00182 · Published 2026-03-25 · No fix listed CWE-79