CVE-2018-19092: Improper Neutralization of Input During Web Page Generation

An issue was discovered in YzmCMS v5.2. It has XSS via a search/index/archives/pubtime/ query string, as demonstrated by the search/index/archives/pubtime/1526387722/page/1.html URI. NOTE: this does not obtain a user's cookie...

PT-2018-14804

Name of the Vulnerable Software and Affected Versions YzmCMS version 5.2 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via a query string in the search/index/archives/pubtime/ endpoint, as shown in the search/index/archives/pubtime/1526387722/page/1.html URI...