8 matches found
CVE-2018-16247
YzmCMS 5.1 has XSS via the admin/systemmanage/userconfigadd.html title parameter...
CVE-2018-16247: Improper Neutralization of Input During Web Page Generation
YzmCMS 5.1 has XSS via the admin/systemmanage/userconfigadd.html title parameter...
CVE-2019-9661: Improper Neutralization of Input During Web Page Generation
Stored XSS exists in YzmCMS 5.2 via the admin/systemmanage/userconfigedit.html "value" parameter,...
CVE-2019-9570
An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/systemmanage/save.html URI, related to the sitecode parameter...
CVE-2019-9570
An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/systemmanage/save.html URI, related to the sitecode parameter...
CVE-2019-9570: Improper Neutralization of Input During Web Page Generation
An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/systemmanage/save.html URI, related to the sitecode parameter...
CVE-2018-17044
The CVE-2018-17044 entry affects YzmCMS 5.1 and is a stored cross-site scripting (XSS) vulnerability exposed through the admin/system_manage/user_config_add.html title parameter . The vulnerability allows injection of script into the title field, which can be stored and subsequently rendered to u...