Description
Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page.
Remediation
References
https://github.com/YMFE/yapi/issues/2190
https://github.com/YMFE/yapi/issues/2240
Related Vulnerabilities
CVE-2020-7709 Vulnerability in maven package org.webjars.npm:json-pointer
CVE-2021-32850 Vulnerability in npm package @claviska/jquery-minicolors
CVE-2020-8203 Vulnerability in maven package org.webjars.bowergithub.lodash:lodash
CVE-2016-10540 Vulnerability in maven package org.webjars:minimatch
CVE-2023-45134 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web-templates