CVE-2018-16247

YzmCMS 5.1 has XSS via the admin/systemmanage/userconfigadd.html title parameter...

CVE-2019-9570

An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/systemmanage/save.html URI, related to the sitecode parameter...

CVE-2019-9570

An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/systemmanage/save.html URI, related to the sitecode parameter...

CVE-2018-17044

The CVE-2018-17044 entry affects YzmCMS 5.1 and is a stored cross-site scripting (XSS) vulnerability exposed through the admin/system_manage/user_config_add.html title parameter . The vulnerability allows injection of script into the title field, which can be stored and subsequently rendered to u...