CVE-2018-10026

The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr parameter, related to the valid function in application/wechat/controller/index.class.php...

PT-2018-9631

Name of the Vulnerable Software and Affected Versions: YzmCMS version 3.7.1 Description: The issue concerns a reflected XSS in the WeChat module of YzmCMS. This occurs via the echostr parameter in the admin/module/init.html endpoint, related to the valid function in the...

CVE-2018-10026: Improper Neutralization of Input During Web Page Generation

The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr parameter, related to the valid function in application/wechat/controller/index.class.php...