Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 7:56 a.m.•17 views

CVE-2024-28725

Cross Site Scripting XSS vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings...

7.1CVSS6.2AI score0.00351EPSS
SaveExploits1References1
NVD
NVD
•added 2024/05/06 9:15 p.m.•28 views

CVE-2024-28725

Cross Site Scripting XSS vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings...

7.1CVSS5.9AI score0.00351EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/05/06 12:00 a.m.•43 views

CVE-2024-28725

Cross Site Scripting XSS vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings...

6.1AI score0.00351EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2024/05/06 12:00 a.m.•17 views

CVE-2024-28725

Cross Site Scripting XSS vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings...

7.1CVSS6.2AI score0.00351EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/06 12:00 a.m.•8 views

CVE-2024-28725: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings...

7.1CVSS6.2AI score0.00351EPSS
SaveExploits1References1
CVE
CVE
•added 2024/05/06 12:00 a.m.•97 views

CVE-2024-28725

A Cross Site Scripting (XSS) vulnerability exists in YzmCMS version 7.0 . The flaw allows attackers to execute arbitrary code by targeting the Ads Management , Carousel Management , and System Settings components. While the vulnerability is classified as XSS, the documentation explicitly states i...

7.1CVSS6.2AI score0.00351EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder