CVE-2025-70844

yaffa v2.0.0 is vulnerable to Cross Site Scripting XSS. An attacker can inject malicious JavaScript into the "Add Account Group" function on the account-group page, allowing execution of arbitrary script in the context of users who view the affected page...

CVE-2025-70844

CVE-2025-70844 : yaffa v2.0.0 is vulnerable to a Cross-Site Scripting (XSS) flaw in the dd Account Groupunction on the account-group page. An attacker can inject malicious JavaScript, which executes in the context of users viewing the affected page. The description does not provide affected ver...