| Titolo | yzmcms v7.1 Doubled Character XSS Manipulations |
|---|
| Descrizione | A reflection XSS vulnerability has been found in YzmCMS V7.1. The vulnerability exists in yzmcms/application/admin/controller/sql.class.php , when logged-in users access to a malicious link, the Cookie will be an attacker to obtain. |
|---|
| Fonte | ⚠️ https://www.yuque.com/baimatangseng-iyusa/qwwm81/sqn7nf0irphq7f1k?singleDoc# 《YzmCMS V7.1 has a reflective XSS vulnerability》 |
|---|
| Utente | sjdalu (UID 81556) |
|---|
| Sottomissione | 22/03/2025 20:17 (2 anni fa) |
|---|
| Moderazione | 07/04/2025 12:00 (16 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 303642 [YzmCMS 7.1 message.tpl gourl cross site scripting] |
|---|
| Punti | 16 |
|---|