CVE-2026-108802

A cross-site scripting (XSS) vulnerability exists in y_project RuoYi (up to version 4.8.3 ) within the Dictionary Data Drawer Preview component. The flaw is located in the renderDrawer function of the /system/dict/data/add file, where a lack of proper input validation on the cssClass argument all...

EUVD-2026-97234

A weakness has been identified in yproject RuoYi up to 4.8.3. This affects the function renderDrawer of the file /system/dict/data/add of the component Dictionary Data Drawer Preview. Executing a manipulation of the argument cssClass can lead to cross site scripting. The attack may be performed...