Description
Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page.
Remediation
References
https://github.com/YMFE/yapi/issues/2190
https://github.com/YMFE/yapi/issues/2240
Related Vulnerabilities
CVE-2020-7656 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery
CVE-2023-23936 Vulnerability in npm package undici
CVE-2023-27162 Vulnerability in maven package org.openapitools:openapi-generator-project
CVE-2021-43138 Vulnerability in maven package org.webjars.bower:async
CVE-2021-33562 Vulnerability in maven package com.shopizer:shopizer