CVE-2022-48197: Yui Project Yui

Medium severity, CVSS 6.1. EPSS: 6.6% chance of exploitation in the next 30 days.

Reflected cross-site scripting (XSS) exists in Sandbox examples in the YUI2 repository. The download distributions, TreeView component and the YUI Javascript library overall are not affected. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

• Yui Project Yui: from 2000, up to and including 2800

Published 2023-01-02. Last modified 2026-06-17.