CVE-2018-16247

YzmCMS 5.1 has XSS via the admin/systemmanage/userconfigadd.html title parameter...

CVE-2018-16247

YzmCMS 5.1 has XSS via the admin/systemmanage/userconfigadd.html title parameter...

CVE-2018-16247

CVE-2018-16247 affects YzmCMS 5.1 with a Cross-Site Scripting (XSS) vulnerability exploitable via the admin/system_manage/user_config_add.html title parameter. The connected records corroborate an XSS issue but do not provide concrete exploit details, affected versions beyond 5.1, or remediation ...

CVE-2018-17044

In YzmCMS 5.1, stored XSS exists via the admin/systemmanage/userconfigadd.html title parameter...

Cross site scripting

In YzmCMS 5.1, stored XSS exists via the admin/systemmanage/userconfigadd.html title parameter...

CVE-2018-17044

The CVE-2018-17044 entry affects YzmCMS 5.1 and is a stored cross-site scripting (XSS) vulnerability exposed through the admin/system_manage/user_config_add.html title parameter . The vulnerability allows injection of script into the title field, which can be stored and subsequently rendered to u...