CVE-2012-5882: Yahoo Yui

Medium severity, CVSS 4.3. EPSS: 2.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader.swf, a similar issue to CVE-2010-4208.

Affected products

• Yahoo Yui: version 2.4.0 only; version 2.4.1 only; version 2.5.0 only; version 2.5.1 only; version 2.5.2 only; version 2.6.0 only; …

Published 2012-11-16. Last modified 2026-06-16.