Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2024-42939
Disclosure Date: August 21, 2024 (last updated August 31, 2024)
A cross-site scripting (XSS) vulnerability in the component /index/index.html of YZNCMS v1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the configured remarks text field.
0
Attacker Value
Unknown
CVE-2023-43233
Disclosure Date: September 27, 2023 (last updated October 08, 2023)
A stored cross-site scripting (XSS) vulnerability in the cms/content/edit component of YZNCMS v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter.
0
Attacker Value
Unknown
CVE-2023-37131
Disclosure Date: July 06, 2023 (last updated October 08, 2023)
A Cross-Site Request Forgery (CSRF) in the component /public/admin/profile/update.html of YznCMS v1.1.0 allows attackers to arbitrarily change the Administrator password via a crafted POST request.
0
