Skip to content
OpenAdvisories
Unscored CVE-2020-35971 EUVD-2020-23554GHSA-9mvm-x44p-xc3j

A storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS code and attack malicious XSS on the /admi…

Published Jun 3, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

A storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS code and attack malicious XSS on the /admin/system_manage/user_config_edit.html page.

References