YXcmsApp V1.4.3 'uninstall()' Function Has Cross-Site Request Forgery Vulnerability

Yxcms is an enterprise building system based on PHP and mysql technology. A cross-site request forgery vulnerability exists in the YXcmsApp V1.4.3 'uninstall' function. Due to the lack of HTTP Referer or token validation, an attacker can exploit the vulnerability to uninstall the system's...

YXCMSAPP Stored Cross-site Scripting Vulnerability

YXcmsApp station building system is based on the latest CPAPP core to build the information platform or portal website development. A stored cross-site scripting vulnerability exists in YXCMSAPP, which allows attackers to exploit this vulnerability to perform cross-site scripting attacks...