CVE-2018-19849

An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter...

Design/Logic Flaw

An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter...

CVE-2018-19849

An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter...

CVE-2018-19849

An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter...

PT-2018-15128

Name of the Vulnerable Software and Affected Versions YzmCMS version 5.2 Description An issue exists in the software where XSS is possible via the searinfo parameter in the "admin/content/search.html" endpoint. Recommendations For YzmCMS version 5.2, consider restricting access to the searinfo...

YzmCMS Cross-Site Scripting Vulnerability (CNVD-2018-26781)

YzmCMS is an open source CMS Content Management System developed by Chinese programmer Yuan Zhimeng. A cross-site scripting vulnerability exists in YzmCMS version 5.2, which can be exploited by a remote attacker to inject arbitrary Web script or HTML by sending the 'searinfo' parameter to the...

CVE-2018-19849: Improper Neutralization of Input During Web Page Generation

An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter...