YzmCMS Cross-Site Scripting Vulnerability (CNVD-2021-90910)

YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. cross-site scripting vulnerability exists in the /link/add.html component of YzmCMS version 5.3. An attacker can use this vulnerability to execute arbitrary Web scripts ...

PT-2021-10420

Name of the Vulnerable Software and Affected Versions: YzmCMS version 5.3 Description: A cross-site scripting XSS issue in the "/link/add.html" component allows attackers to execute arbitrary web scripts or HTML. Recommendations: For YzmCMS version 5.3, update to a version that includes a fix for...

CVE-2020-19949: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the /link/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML...