PT-2021-11887

Name of the Vulnerable Software and Affected Versions: YzmCMS version 5.8 Description: A storage XSS issue allows attackers to inject JS code, enabling malicious XSS attacks on the "/admin/system manage/user config edit.html" API endpoint. This can be exploited to execute unauthorized actions...

PT-2019-9280

Name of the Vulnerable Software and Affected Versions YzmCMS version 5.1 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via the title parameter in the admin/system manage/user config add.html page. Recommendations For YzmCMS version 5.1, avoid using the title...

PT-2019-19785

Name of the Vulnerable Software and Affected Versions YzmCMS version 5.2 Description A stored XSS issue exists, allowing potential exploitation via the value parameter in the "admin/system manage/user config edit.html" API endpoint. Recommendations For YzmCMS version 5.2, consider restricting...

CVE-2019-9570

An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/systemmanage/save.html URI, related to the sitecode parameter...

PT-2019-19716

Name of the Vulnerable Software and Affected Versions YzmCMS version 5.2.0 Description An issue was discovered that allows XSS via the bottom text field to the "admin/system manage/save.html" URI, related to the site code parameter. Recommendations For YzmCMS version 5.2.0, as a temporary...

CVE-2018-17044

In YzmCMS 5.1, stored XSS exists via the admin/systemmanage/userconfigadd.html title parameter...

PT-2018-13858

Name of the Vulnerable Software and Affected Versions YzmCMS version 5.1 Description The issue is related to stored XSS that exists via the title parameter in the admin/system manage/user config add.html page. Recommendations For YzmCMS version 5.1, update the software to a version that fixes thi...