Description
A cross-site scripting (XSS) vulnerability in the Publish Article function of yzmcms v7.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a published article.
Medium · 6.1
CVE-2024-39174
EUVD-2024-37859GHSA-pqhg-95v7-rfjf
A cross-site scripting (XSS) vulnerability in the Publish Article function of yzmcms v7.1 allows attackers to execute arbitrary web scripts…
Published Jul 5, 2024 · Updated Aug 2, 2024 · Assigned by mitre