CVE-2021-33237

Name of the Vulnerable Software and Affected Versions YMFE yapo version 1.9.1

Description The issue allows an attacker to execute arbitrary code via the remark parameter of the interface edit page. This is a Cross Site Scripting vulnerability.

Recommendations For YMFE yapo version 1.9.1, avoid using the remark parameter in the interface edit page until the issue is resolved. As a temporary workaround, consider restricting access to the interface edit page to minimize the risk of exploitation.