Description
Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | yapi-vendor | <= 1.9.1 | — | GHSA-4jqw-vfmj-9rmh |
Medium · 5.4
CVE-2021-36686
GHSA-4jqw-vfmj-9rmh
Cross-site Scripting in yapi-vendor
Published Jan 26, 2023 · Updated Apr 1, 2025 · Assigned by mitre