8 matches found
CVE-2018-16247
YzmCMS 5.1 has XSS via the admin/systemmanage/userconfigadd.html title parameter...
CVE-2018-16247
YzmCMS 5.1 has XSS via the admin/systemmanage/userconfigadd.html title parameter...
CVE-2018-16247
CVE-2018-16247 affects YzmCMS 5.1 with a Cross-Site Scripting (XSS) vulnerability exploitable via the admin/system_manage/user_config_add.html title parameter. The connected records corroborate an XSS issue but do not provide concrete exploit details, affected versions beyond 5.1, or remediation ...
CVE-2018-16247: Improper Neutralization of Input During Web Page Generation
YzmCMS 5.1 has XSS via the admin/systemmanage/userconfigadd.html title parameter...
CVE-2018-17044
In YzmCMS 5.1, stored XSS exists via the admin/systemmanage/userconfigadd.html title parameter...
Cross site scripting
In YzmCMS 5.1, stored XSS exists via the admin/systemmanage/userconfigadd.html title parameter...
CVE-2018-17044
The CVE-2018-17044 entry affects YzmCMS 5.1 and is a stored cross-site scripting (XSS) vulnerability exposed through the admin/system_manage/user_config_add.html title parameter . The vulnerability allows injection of script into the title field, which can be stored and subsequently rendered to u...