Description
Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page.
Remediation
References
https://github.com/YMFE/yapi/issues/2190
https://github.com/YMFE/yapi/issues/2240
Related Vulnerabilities
CVE-2016-5004 Vulnerability in maven package org.apache.xmlrpc:xmlrpc
CVE-2021-21179 Vulnerability in maven package org.webjars.npm:electron
CVE-2010-1622 Vulnerability in maven package org.springframework:spring-core
CVE-2019-9153 Vulnerability in npm package openpgp
CVE-2020-8244 Vulnerability in maven package org.webjars.npm:bl