Medium · 6.1 CVE-2025-66880 EUVD-2025-208170GHSA-5jrv-3jjc-48gv

Cross Site Scripting vulnerability in Wethink Technology Inc 720yun pano-sdk 0.5.877 allows a remote attacker to execute arbitrary code via…

Published Mar 2, 2026 · Updated Mar 2, 2026 · Assigned by mitre

Description

Cross Site Scripting vulnerability in Wethink Technology Inc 720yun pano-sdk 0.5.877 allows a remote attacker to execute arbitrary code via the LoginComp (Module 2093) and SignupComp (Module 2094) modules.

References

https://www.720yun.com
https://github.com/ZyWAC/CVE-Disclosures/blob/main/2025/720yun/CVE-2025-66880.md