CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Rapid7 Vulnerability Database (full)•added 2021/06/03 12:00 a.m.•6 views

CVE-2020-35971: Improper Neutralization of Input During Web Page Generation

A storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS code and attack malicious XSS on the /admin/systemmanage/userconfigedit.html page...

5.4CVSS5.7AI score0.00503EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2019/03/11 12:00 a.m.•3 views

CVE-2019-9661: Improper Neutralization of Input During Web Page Generation

Stored XSS exists in YzmCMS 5.2 via the admin/systemmanage/userconfigedit.html "value" parameter,...

4.8CVSS5.8AI score0.00676EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by