Design/Logic Flaw

2021-06-0321:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

A storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS code and attack malicious XSS on the /admin/system_manage/user_config_edit.html page.

CPENameOperatorVersion
yzmcmseq5.8

CPE	Name	Operator	Version
	yzmcms	eq	5.8

References

github.com/yzmcms/yzmcms/issues/54