Skip to content
OpenAdvisories
High · 7.4 CVE-2024-33831 EUVD-2024-31540GHSA-5626-x6h5-mpm4

A stored cross-site scripting (XSS) vulnerability in the Advanced Expectation - Response module of yapi v1.10.2 allows attackers to execute…

Published Apr 30, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

A stored cross-site scripting (XSS) vulnerability in the Advanced Expectation - Response module of yapi v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the body field.

References