Kantorge Yaffa vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Kantorge Yaffa: 1 record(s), with affected versions and fixes.
cpe:2.3:a:kantorge:yaffa

CVE-2025-70844 Medium · 6.1 CWE-94 Apr 7, 2026

Code Injection in Kantorge Yaffa

yaffa v2.0.0 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript into the "Add Account Group" function on the account-group page, allowing execution of arbitrary script in the context of users who view the affected page.