PT-2026-22607 · Wethink Technology · 720Yun Pano-Sdk

CVE-2025-66880 · Publicado 2026-03-02 · Atualizado 2026-03-02

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Wethink Technology Inc 720yun pano-sdk version 0.5.877

Description A Cross Site Scripting issue exists in Wethink Technology Inc 720yun pano-sdk version 0.5.877. This allows a remote attacker to execute arbitrary code through the LoginComp (Module 2093) and SignupComp (Module 2094) modules. The issue involves the potential for malicious scripts to be injected and executed within the application context.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-66880

Produtos afetados

720Yun Pano-Sdk

Referências · 4

• 🔥 https://github.com/ZyWAC/CVE-Disclosures/blob/main/2025/720yun/CVE-2025-66880.md · Exploit
• https://720yun.com · Nota
• https://t.me/cveNotify/153823 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-66880 · Nota de Segurança