CVE-2018-10026

The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr parameter, related to the valid function in application/wechat/controller/index.class.php.

Score

CVSS 3.0 4.8 Medium

Status

Modified - cve@mitre.org

Published

2018-04-11

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Yzmcms (Yzmcms)

References

• https://github.com/SukaraLin/Drops/blob/master/YZMCMSxss.md