Description
Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page.
Remediation
References
https://github.com/YMFE/yapi/issues/2190
https://github.com/YMFE/yapi/issues/2240
Related Vulnerabilities
CVE-2020-7707 Vulnerability in maven package org.webjars.npm:property-expr
CVE-2021-23355 Vulnerability in npm package ps-kill
CVE-2022-22885 Vulnerability in maven package cn.hutool:hutool-http
CVE-2020-8147 Vulnerability in npm package utils-extend
CVE-2022-32533 Vulnerability in maven package org.apache.portals.jetspeed-2:jetspeed