Description
Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page.
Remediation
References
https://github.com/YMFE/yapi/issues/2190
https://github.com/YMFE/yapi/issues/2240
Related Vulnerabilities
CVE-2023-26156 Vulnerability in npm package chromedriver
CVE-2023-22467 Vulnerability in maven package org.webjars.npm:luxon
CVE-2021-21172 Vulnerability in npm package electron
CVE-2018-3755 Vulnerability in npm package sexstatic
CVE-2023-29523 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore