Description
Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in.
Unscored
CVE-2020-18084
EUVD-2020-10013GHSA-8jm8-5rhf-cx7x
Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field …
Published Apr 30, 2021 · Updated Aug 4, 2024 · Assigned by mitre