CVE-2020-19950: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the /banner/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML...