CVE-2018-19092

An issue was discovered in YzmCMS v5.2. It has XSS via a search/index/archives/pubtime/ query string, as demonstrated by the search/index/archives/pubtime/1526387722/page/1.html URI. NOTE: this does not obtain a user's cookie.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-11-07

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Yzmcms (Yzmcms)

References

• https://github.com/yzmcms/yzmcms/issues/7