Cross site scripting

2021-04-3021:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

48.1%

JSON

Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the “referer” field of a POST request to the component “/member/index/login.html” when logging in.

CPENameOperatorVersion
yzmcmseq5.2

CPE	Name	Operator	Version
	yzmcms	eq	5.2

References

github.com/yzmcms/yzmcms/issues/9

0.001 Low

EPSS

Percentile

48.1%

JSON

Related for PRION:CVE-2020-18084