| 标题 | yzmcms v7.1 Doubled Character XSS Manipulations |
|---|
| 描述 | A reflection XSS vulnerability has been found in YzmCMS V7.1. The vulnerability exists in yzmcms/application/admin/controller/sql.class.php , when logged-in users access to a malicious link, the Cookie will be an attacker to obtain. |
|---|
| 来源 | ⚠️ https://www.yuque.com/baimatangseng-iyusa/qwwm81/sqn7nf0irphq7f1k?singleDoc# 《YzmCMS V7.1 has a reflective XSS vulnerability》 |
|---|
| 用户 | sjdalu (UID 81556) |
|---|
| 提交 | 2025-03-22 20時17分 (2 年前) |
|---|
| 管理 | 2025-04-07 12時00分 (16 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 303642 [YzmCMS 7.1 message.tpl gourl 跨网站脚本] |
|---|
| 积分 | 16 |
|---|