Rezultati pretraživanja za 'Proizvođač: yzmcms'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-23383 | 6.4 | YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is necessary to judge the user's login status before accessing the personal home page, but the vulnerability can | 2026-07-09 01:17:15 | 2022-03-10 17:45:51 |
| CVE-2021-36712 | 5.4 | Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function. | 2026-07-09 01:16:58 | 2023-02-03 18:15:11 |
| CVE-2025-56304 | 6.1 | Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 via the referer header in the register page. | 2026-07-05 02:16:59 | 2025-09-23 17:15:33 |
| CVE-2026-29933 | 6.1 | A reflected cross-site scripting (XSS) vulnerability in the /index/login.html component of YZMCMS v7.4 allows attackers to execute arbitrary Javascript in the context of the user's browser via modifying the referrer value in the request header. | 2026-03-31 21:38:24 | 2026-03-26 15:16:35 |
| CVE-2023-52274 | 6.1 | member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header. | 2025-06-17 16:15:30 | 2024-01-11 03:15:10 |
| CVE-2024-39174 | 6.1 | A cross-site scripting (XSS) vulnerability in the Publish Article function of yzmcms v7.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a published article. | 2025-06-13 14:40:01 | 2024-07-05 18:15:32 |
| CVE-2024-28725 | 7.1 | Cross Site Scripting (XSS) vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings. | 2025-06-10 19:42:27 | 2024-05-06 21:15:48 |
| CVE-2024-35110 | 5.5 | A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp/core/class/application.class.php: when logged-in users access a malicious link, their cookies can be captured by an attacker. | 2025-06-10 18:32:58 | 2024-05-17 08:15:06 |
| CVE-2024-24291 | 6.1 | An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL. | 2025-04-24 16:15:27 | 2024-02-06 16:15:52 |
| CVE-2025-3397 | 5.0 | A vulnerability classified as problematic has been found in YzmCMS 7.1. Affected is an unknown function of the file message.tpl. The manipulation of the argument gourl leads to cross site scripting. It is possible to launch the attack remotely. The e | 2025-04-09 14:37:11 | 2025-04-08 02:15:21 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/5
Zapisa po stranici: