CVE-2024-35110

CVE-2024-35110 – YzmCMS 7.1 (yzmphp/core/class/application.class.php) has a reflected XSS flaw that enables an attacker to steal a logged-in user’s cookies when they visit a crafted link. The issue occurs in the application.class.php implementation and is reported across multiple feeds, with Red ...