Design/Logic Flaw

2018-11-0719:29:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.3%

JSON

An issue was discovered in YzmCMS v5.2. It has XSS via a search/index/archives/pubtime/ query string, as demonstrated by the search/index/archives/pubtime/1526387722/page/1.html URI. NOTE: this does not obtain a user’s cookie.

CPENameOperatorVersion
yzmcmseq5.2

CPE	Name	Operator	Version
	yzmcms	eq	5.2

References

github.com/yzmcms/yzmcms/issues/7