CVE-2024-28725

Cross Site Scripting XSS vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings...

CVE-2024-28725

A Cross Site Scripting (XSS) vulnerability exists in YzmCMS version 7.0 . The flaw allows attackers to execute arbitrary code by targeting the Ads Management , Carousel Management , and System Settings components. While the vulnerability is classified as XSS, the documentation explicitly states i...