Description
Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page.
Remediation
References
https://github.com/YMFE/yapi/issues/2190
https://github.com/YMFE/yapi/issues/2240
Related Vulnerabilities
CVE-2019-17495 Vulnerability in maven package org.webjars.bower:swagger-ui
CVE-2021-3918 Vulnerability in npm package json-schema
CVE-2020-28168 Vulnerability in maven package org.webjars.bowergithub.axios:axios
CVE-2021-32817 Vulnerability in npm package express-hbs
CVE-2020-13920 Vulnerability in maven package org.apache.activemq:activemq-broker