YayPricing < 3.5.7 - Subscriber+ Stored XSS via save_page_data REST Route

Description

The plugin does not perform an authorization check on a REST route that saves its pricing rules, allowing users with the subscriber role and above to store JavaScript that executes in the browser of an administrator who opens the plugin's settings page.