Cross site scripting

2021-05-1414:15:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page.

CPENameOperatorVersion
yfcmfeq2.3.1

CPE	Name	Operator	Version
	yfcmf	eq	2.3.1

References

github.com/lxw1844912514/YFCMF/issues/2