CVE-2018-19092

CVE-2018-19092 affects YzmCMS v5.2, with an XSS vulnerability triggered through the search/index/archives/pubtime/ query string (e.g., …/pubtime/1526387722/page/1.html). The issue is described as an XSS that does not obtain a user’s cookie. The connected records confirm the vulnerability details ...