89 matches found
Cross-site Scripting in yapi-vendor
An issue was discovered in YMFE YApi 1.3.23. There is stored XSS in the name field of a project...
YMFE YApi Cross-Site Scripting Vulnerability
YMFE YApi is a visual interface management platform. A cross-site scripting vulnerability exists in the item name field in YMFE YApi version 1.3.23. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
Cross-site Scripting (XSS)
yapi-cli is vulnerable to a cross-site scripting XSS attack. The library does not sanitize or validate the projectName variable, allowing a malicious user to inject and execute arbitrary Javascript...
CVE-2018-17574
An issue was discovered in YMFE YApi 1.3.23. There is stored XSS in the name field of a project...
CVE-2018-17574
An issue was discovered in YMFE YApi 1.3.23. There is stored XSS in the name field of a project...
Cross site scripting
An issue was discovered in YMFE YApi 1.3.23. There is stored XSS in the name field of a project...
CVE-2018-17574
An issue was discovered in YMFE YApi 1.3.23. There is stored XSS in the name field of a project...
CVE-2018-17574
CVE-2018-17574 affects YMFE YApi 1.3.23 with a stored XSS vulnerability in the project name field. The issue is described across multiple sources (NVD entry and related advisories) as a stored cross-site scripting flaw in YMFE YApi 1.3.23; CVSS v3.0 base score 5.4 (MEDIUM), CVSS v2 base score 3.5...
