| Titre | yzmcms v7.1 Doubled Character XSS Manipulations |
|---|
| Description | A reflection XSS vulnerability has been found in YzmCMS V7.1. The vulnerability exists in yzmcms/application/admin/controller/sql.class.php , when logged-in users access to a malicious link, the Cookie will be an attacker to obtain. |
|---|
| La source | ⚠️ https://www.yuque.com/baimatangseng-iyusa/qwwm81/sqn7nf0irphq7f1k?singleDoc# 《YzmCMS V7.1 has a reflective XSS vulnerability》 |
|---|
| Utilisateur | sjdalu (UID 81556) |
|---|
| Soumission | 22/03/2025 20:17 (il y a 2 ans) |
|---|
| Modérer | 07/04/2025 12:00 (16 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 303642 [YzmCMS 7.1 message.tpl gourl cross site scripting] |
|---|
| Points | 16 |
|---|