Cross-site Scripting in yapi-vendor

Description

References

• nvd.nist.gov/vuln/detail/CVE-2021-36686 · ADVISORY
• YMFE/yapi · WEB
• YMFE/yapi · WEB
• YMFE/yapi · PACKAGE

yapi의 다른 취약점

• CVE-2025-70060보통 5.4An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in YMFE yapi v1.12.0.
• CVE-2025-70059높음 7.5An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in YMFE yapi v1.12.0 and allows attackers to cause a denial…
• CVE-2025-70058높음 7.4An issue pertaining to CWE-295: Improper Certificate Validation was discovered in YMFE yapi v1.12.0. The application disables TLS/SSL certif…
• CVE-2021-27884보통 5.1Weak JSON Web Token (JWT) signing secret generation in YMFE YApi through 1.9.2 allows recreation of other users' JWT tokens. This occurs bec…
• CVE-2018-17574보통 5.4An issue was discovered in YMFE YApi 1.3.23. There is stored XSS in the name field of a project.