Description
An issue was discovered in YMFE YApi 1.3.23. There is stored XSS in the name field of a project.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | yapi-vendor | < 1.3.23 | 1.3.23 | GHSA-5xgh-643p-cp2g |
Medium · 5.4
CVE-2018-17574
EUVD-2018-0732GHSA-5xgh-643p-cp2g
Cross-site Scripting in yapi-vendor
Published Sep 28, 2018 · Updated Aug 5, 2024 · Assigned by mitre