Skip to content
OpenAdvisories
Medium · 5.4 CVE-2021-36712 EUVD-2021-23306GHSA-x6fm-qhpw-xc88

Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function.

Published Feb 3, 2023 · Updated Jul 9, 2026 · Assigned by mitre