CVE-2020-19950

A cross-site scripting XSS vulnerability in the /banner/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-19950

CVE-2020-19950 applies to YzmCMS v5.3, specifically the vulnerable /banner/add.html component. The connected documents confirm a cross-site scripting (XSS) vulnerability that allows an attacker to execute arbitrary web scripts or HTML in the context of the affected user. The available sources do ...