Cross-Site Scripting in Swagger UI of RuoYi by yangzongzhuan
CVE-2025-7901

5.3MEDIUM

Key Information:

Vendor: Yangzongzhuan
Status: Ruoyi
Vendor: CVE Published:; 20 July 2025

🔔 Create Yangzongzhuan Vulnerability Alert

What is CVE-2025-7901?

A vulnerability has been identified in the Swagger UI component of RuoYi by yangzongzhuan, specifically affecting the handling of the configUrl argument in the /swagger-ui/index.html file. This flaw can lead to cross-site scripting (XSS) attacks that may be executed remotely, potentially compromising user data and allowing attackers to inject malicious scripts into web pages viewed by users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch