413 matches found
CVE-2024-28725
The CVE-2024-28725 issue is a Cross Site Scripting (XSS) vulnerability in YzmCMS 7.0, exploitable via Ads Management, Carousel Management, and System Settings. Documents consistently identify the affected software as YzmCMS 7.0 and describe an XSS flaw that could enable arbitrary code execution i...
CVE-2024-28725
Cross Site Scripting XSS vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings...
CVE-2024-28725
Cross Site Scripting XSS vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings...
PT-2024-22541 · Yzmcms · Yzmcms
Name of the Vulnerable Software and Affected Versions: YzmCMS version 7.0 Description: The issue allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings. This is a Cross Site Scripting XSS issue. Recommendations: For YzmCMS version 7.0, update to a...
CVE-2024-24291
An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL...
CVE-2024-24291
An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL...
Yzmcms Security Vulnerabilities
Yzmcms is an open source CMS Content Management System for Yzmcms individual developers. A security vulnerability exists in Yzmcms v7.0. An attacker exploited the vulnerability to direct users to a malicious site via a specially crafted URL...
PT-2024-20339 · Yzmcms · Yzmcms
Name of the Vulnerable Software and Affected Versions: yzmcms version 7.0 Description: An issue in the component /member/index/login of yzmcms allows attackers to direct users to malicious sites via a crafted URL. Recommendations: For yzmcms version 7.0, consider restricting access to the...
CVE-2024-24291
CVE-2024-24291 affects yzmcms v7.0, impacting the /member/index/login component. A crafted URL can redirect users to malicious sites. The CVSS v3.1 score is 6.1 (Medium) with user interaction required and no confirmed patch version in the provided sources. Some references note no available fix ye...
CVE-2024-24291
An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL...
YzmCMS Cross-Site Scripting Vulnerability (CNVD-2024-02989)
Yzmcms is an open source CMS Content Management System. YzmCMS version 6.5 to 7.0 cross-site scripting vulnerability, the vulnerability stems from the member/index/register.html page of the Referer HTTP header of the user-supplied data lack of effective filtering and escaping, an attacker can...
CVE-2023-52274
member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header...
Design/Logic Flaw
member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header...
CVE-2023-52274
member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header...
CVE-2023-52274
member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header...
YzmCMS 安全漏洞
Yzmcms is an open source CMS Content Management System. YzmCMS version 6.5 to 7.0 cross-site scripting vulnerability, the vulnerability stems from the member/index/register.html page of the Referer HTTP header of the user-supplied data lack of effective filtering and escaping, an attacker can...
CVE-2023-52274
CVE-2023-52274 affects YzmCMS versions 6.5–7.0, where a cross-site scripting (XSS) vulnerability exists in member/index/register.html via the Referer HTTP header. The CNVD/NVD/OSV/CVE entries describe the root cause as insufficient filtering/escaping of user-supplied data in the Referer header, e...
CVE-2023-52274
member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header...
Yzmcms Cross-Site Request Forgery Vulnerability (CNVD-2023-64113)
Yzmcms is Yzmcms a set of open source CMS Content Management System. yzmcms 5.6 version of the cross-site request forgery vulnerability , the vulnerability stems from the program does not adequately verify whether the request comes from a trusted user , an attacker can use this vulnerability to...