CVE:CVE-2022-48197
CNNVD:CNNVD-202301-035
YUI是YUI Library开源的一个 JavaScript 和 CSS 库。
yahoo YUI2存在安全漏洞，该漏洞源于up.php sam.php renderhidden.php removechildren.php removeall.php readd.php overflow.php newnode2.php newnod存在跨站脚本漏洞。
solution:Upgrade yui_project yui to a higher version than 2800,and avoid the version [2000,2800]