package

NuGet/YAFNET.Core

pkg:nuget/YAFNET.Core

HIGH8.1NuGet

YAFNET has Unauthenticated Stored Second-Order XSS in Admin Event Log via Reflected `User-Agent` Header

Modified: 5/13/2026

HIGH7.3NuGet

YAFNET has Stored XSS in Forum Thread Posts/Replies that Allows Arbitrary JavaScript Execution for All Thread Viewers

Modified: 5/13/2026

HIGH8.8NuGet

YAFNET: Pre-Handler Authorization Bypass on Admin Pages Enables Blind SQL Execution via `/Admin/RunSql`

Modified: 5/13/2026