إرسال #525203: yzmcms v7.1 Doubled Character XSS Manipulationsالمعلومات

عنوانyzmcms v7.1 Doubled Character XSS Manipulations
الوصفA reflection XSS vulnerability has been found in YzmCMS V7.1. The vulnerability exists in yzmcms/application/admin/controller/sql.class.php , when logged-in users access to a malicious link, the Cookie will be an attacker to obtain.
المصدر⚠️ https://www.yuque.com/baimatangseng-iyusa/qwwm81/sqn7nf0irphq7f1k?singleDoc# 《YzmCMS V7.1 has a reflective XSS vulnerability》
المستخدم
 sjdalu (UID 81556)
ارسال22/03/2025 08:17 PM (1 سنة منذ)
الاعتدال07/04/2025 12:00 PM (16 days later)
الحالةتمت الموافقة
إدخال VulDB303642 [YzmCMS 7.1 message.tpl gourl البرمجة عبر المواقع]
النقاط16

Do you know our Splunk app?

Download it now for free!