CVE-2020-19950: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the /banner/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML...

PT-2021-10421

Name of the Vulnerable Software and Affected Versions: YzmCMS version 5.3 Description: A cross-site scripting XSS issue in the "/banner/add.html" component allows attackers to execute arbitrary web scripts or HTML. This affects the ability to securely manage banners within the system...