Skip to content
OpenAdvisories
Unscored CVE-2018-19092 EUVD-2018-10807GHSA-m456-6gmq-cfpg

An issue was discovered in YzmCMS v5.2. It has XSS via a search/index/archives/pubtime/ query string, as demonstrated by the search/index/a…

Published Nov 7, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

An issue was discovered in YzmCMS v5.2. It has XSS via a search/index/archives/pubtime/ query string, as demonstrated by the search/index/archives/pubtime/1526387722/page/1.html URI. NOTE: this does not obtain a user's cookie.

References