Created
March 9, 2026 06:11
-
-
Save zcxlighthouse/b9dc0586016699397c476fda02abc0c7 to your computer and use it in GitHub Desktop.
CVE-2025-70060
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [CVE ID] | |
| CVE-2025-70060 | |
| [PRODUCT] | |
| yapi | |
| [VERSION] | |
| v1.12.0 | |
| [PROBLEM TYPE] | |
| Improper Neutralization of Input During Web Page Generation (CWE-79) | |
| [DESCRIPTION] | |
| An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in YMFE yapi v1.12.0. This weakness allows attackers to inject malicious scripts into web pages, potentially leading to cross-site scripting (XSS) attacks and unauthorized access to user data. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment