CVE-2018-17044

In YzmCMS 5.1, stored XSS exists via the admin/system_manage/user_config_add.html title parameter.

Score

CVSS 3.0 4.8 Medium

Status

Modified - cve@mitre.org

Published

2018-09-14

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Yzmcms (Yzmcms)

References

• https://github.com/yzmcms/yzmcms/issues/3