CVE-2020-35971

2021-06-0321:15:07

Google

osv.dev

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

A storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS code and attack malicious XSS on the /admin/system_manage/user_config_edit.html page.

CPENameOperatorVersion
yzmcmseq5.3.0
yzmcmseq5.8

CPE	Name	Operator	Version
	yzmcms	eq	5.3.0
	yzmcms	eq	5.8

References

github.com/yzmcms/yzmcms/issues/54