Skip to content
OpenAdvisories

Product · Hyweb

HyCMS-J1

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.6
    CVE-2021-22849

    Hyweb HyCMS-J1 - Stored XSS

    Hyweb HyCMS-J1 backend editing function does not filter special characters. Users after log-in can inject JavaScript syntax to perform a stored XSS (Stored Cross-site scripting) attack.

    Hyweb HyCMS-J1