Description
Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page.
Remediation
References
https://github.com/YMFE/yapi/issues/2190
https://github.com/YMFE/yapi/issues/2240
Related Vulnerabilities
CVE-2021-21626 Vulnerability in maven package io.jenkins.plugins:warnings-ng
CVE-2022-35143 Vulnerability in npm package raneto
CVE-2023-25767 Vulnerability in maven package org.jenkins-ci.plugins:azure-credentials
CVE-2020-11887 Vulnerability in npm package svg2png
CVE-2020-6449 Vulnerability in maven package org.webjars.npm:electron