| Title | yzmcms v7.1 Doubled Character XSS Manipulations |
|---|
| Description | A reflection XSS vulnerability has been found in YzmCMS V7.1. The vulnerability exists in yzmcms/application/admin/controller/sql.class.php , when logged-in users access to a malicious link, the Cookie will be an attacker to obtain. |
|---|
| Source | ⚠️ https://www.yuque.com/baimatangseng-iyusa/qwwm81/sqn7nf0irphq7f1k?singleDoc# 《YzmCMS V7.1 has a reflective XSS vulnerability》 |
|---|
| User | sjdalu (UID 81556) |
|---|
| Submission | 03/22/2025 08:17 PM (12 months ago) |
|---|
| Moderation | 04/07/2025 12:00 PM (16 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 303642 [YzmCMS 7.1 message.tpl gourl cross site scripting] |
|---|
| Points | 16 |
|---|