Description
A cross-site scripting (XSS) vulnerability in the component /index/index.html of YZNCMS v1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the configured remarks text field.
Medium · 4.6
CVE-2024-42939
EUVD-2024-39830GHSA-x3c7-p6rq-8fr6
A cross-site scripting (XSS) vulnerability in the component /index/index.html of YZNCMS v1.4.2 allows attackers to execute arbitrary web sc…
Published Aug 21, 2024 · Updated Aug 21, 2024 · Assigned by mitre