Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-33831
7.4
HIGHCVSS v3
Published
April 30, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A stored cross-site scripting (XSS) vulnerability in the Advanced Expectation - Response module of yapi v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the body field.
GitHub