Yui Security Vulnerabilities and Issues — Yui CVE List

Lucene search

YahooYui

3 matches found

CVE•added 2010/11/07 10:0 p.m.•83 views

CVE-2010-4207

Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to charts/assets/charts.swf.

4.3CVSS5.8AI score0.02044EPSS

CVE•added 2010/11/07 10:0 p.m.•65 views

CVE-2010-4208

Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf.

4.3CVSS5.8AI score0.01767EPSS

CVE•added 2010/11/07 10:0 p.m.•52 views

CVE-2010-4209

Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf.

4.3CVSS5.4AI score0.01868EPSS