Skip to content
OpenAdvisories

Package · npm

yui2

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium —

    Cross-site scripting in yui 2.4.0

    Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207.