PT-2026-22607 · Wethink Technology · 720Yun Pano-Sdk

Published 2026-03-02 · Updated 2026-03-02 · CVE-2025-66880

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Wethink Technology Inc 720yun pano-sdk version 0.5.877

Description A Cross Site Scripting issue exists in Wethink Technology Inc 720yun pano-sdk version 0.5.877. This allows a remote attacker to execute arbitrary code through the LoginComp (Module 2093) and SignupComp (Module 2094) modules. The issue involves the potential for malicious scripts to be injected and executed within the application context.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-66880

Affected Products

720Yun Pano-Sdk

References · 4

• 🔥 https://github.com/ZyWAC/CVE-Disclosures/blob/main/2025/720yun/CVE-2025-66880.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-66880 · Security Note
• https://720yun.com · Note
• https://t.me/cveNotify/153823 · Telegram Post