409 matches found
CVE-2024-39174
A cross-site scripting XSS vulnerability in the Publish Article function of yzmcms v7.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a published article...
CVE-2024-39174
A cross-site scripting XSS vulnerability in the Publish Article function of yzmcms v7.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a published article...
PT-2024-28378 · Yzmcms · Yzmcms
Name of the Vulnerable Software and Affected Versions: yzmcms version 7.1 Description: A cross-site scripting XSS vulnerability in the Publish Article function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a published article. Recommendations: For...
CVE-2024-39174
A cross-site scripting XSS vulnerability in the Publish Article function of yzmcms v7.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a published article...
Yzmcms Security Vulnerabilities
Yzmcms is an open source CMS Content Management System by the individual developer of Yzmcms. A security vulnerability exists in Yzmcms version 7.1, which stems from a cross-site scripting vulnerability in the Publish Article feature, which allows an attacker to execute arbitrary Web script or HT...
CVE-2024-39174
CVE-2024-39174 affects yzmcms v7.1, where the Publish Article function is vulnerable to cross-site scripting (XSS) via a crafted payload injected into a published article. The issue is described consistently across sources (RH, NVD, OSV, CNNVD, CVE listings) as a reflected/stored-style XSS vulner...
CVE-2024-39174
A cross-site scripting XSS vulnerability in the Publish Article function of yzmcms v7.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a published article...
CVE-2024-35110
A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp/core/class/application.class.php: when logged-in users access a malicious link, their cookies can be captured by an attacker...
CVE-2024-35110
A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp/core/class/application.class.php: when logged-in users access a malicious link, their cookies can be captured by an attacker...
CVE-2024-35110
CVE-2024-35110 – YzmCMS 7.1 (yzmphp/core/class/application.class.php) has a reflected XSS flaw that enables an attacker to steal a logged-in user’s cookies when they visit a crafted link. The issue occurs in the application.class.php implementation and is reported across multiple feeds, with Red ...
CVE-2024-35110
A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp/core/class/application.class.php: when logged-in users access a malicious link, their cookies can be captured by an attacker...
CVE-2024-35110
A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp/core/class/application.class.php: when logged-in users access a malicious link, their cookies can be captured by an attacker...
YzmCMS 安全漏洞
Yzmcms is an open source CMS Content Management System by the individual developer of Yzmcms. A security vulnerability exists in YzmCMS version 7.1, which stems from the presence of a reflective cross-site scripting vulnerability that allows an attacker to capture a logged-in user's cookie when...
PT-2024-26322 · Yzmcms · Yzmcms
Name of the Vulnerable Software and Affected Versions: YzmCMS version 7.1 Description: A reflected XSS issue has been found in the yzmphp/core/class/application.class.php file. When logged-in users access a malicious link, their cookies can be captured by an attacker. This could lead to potential...
CVE-2024-28725
Cross Site Scripting XSS vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings...
CVE-2024-28725
The CVE-2024-28725 issue is a Cross Site Scripting (XSS) vulnerability in YzmCMS 7.0, exploitable via Ads Management, Carousel Management, and System Settings. Documents consistently identify the affected software as YzmCMS 7.0 and describe an XSS flaw that could enable arbitrary code execution i...
CVE-2024-28725
Cross Site Scripting XSS vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings...
PT-2024-22541 · Yzmcms · Yzmcms
Name of the Vulnerable Software and Affected Versions: YzmCMS version 7.0 Description: The issue allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings. This is a Cross Site Scripting XSS issue. Recommendations: For YzmCMS version 7.0, update to a...