Yzmcms vulnerabilities

Products

• Yzmcms 47

Newest

• yzmcms A reflected cross-site scripting (XSS) vulnerability in the /index/login.html component of YZMCMS... CVE-2026-29933 6.1 MediumMarch 26, 2026
• yzmcms Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 via the referer header in the... CVE-2025-56304 6.1 MediumSeptember 23, 2025
• yzmcms YzmCMS message.tpl cross site scripting CVE-2025-3397 5.3 MediumApril 8, 2025
• yzmcms A cross-site scripting (XSS) vulnerability in the Publish Article function of yzmcms v7.1 allows... CVE-2024-39174 6.1 MediumJuly 5, 2024
• yzmcms A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp... CVE-2024-35110 5.5 MediumMay 17, 2024
• yzmcms Cross Site Scripting (XSS) vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via... CVE-2024-28725 7.1 HighMay 6, 2024
• yzmcms An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to... CVE-2024-24291 6.1 MediumFebruary 6, 2024
• yzmcms member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header. CVE-2023-52274 6.1 MediumJanuary 11, 2024
• yzmcms Cross Site Request Forgery (CSRF) vulnerability in yzmcms version 5.6, allows remote attackers to... CVE-2020-23595 8.8 HighAugust 11, 2023
• yzmcms Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary... CVE-2020-20502 6.5 MediumJune 20, 2023
• yzmcms Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via... CVE-2021-36712 5.4 MediumFebruary 3, 2023
• yzmcms YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user... CVE-2022-23383 9.1 CriticalMarch 7, 2022
• yzmcms YzmCMS v6.3 is affected by Cross Site Request Forgery (CSRF) in /admin.add CVE-2022-23384 8.8 HighFebruary 15, 2022
• yzmcms The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently,... CVE-2022-23889 5.3 MediumJanuary 28, 2022
• yzmcms YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey (CSRF) via the component ... CVE-2022-23888 8.8 HighJanuary 28, 2022
• yzmcms YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers... CVE-2022-23887 6.5 MediumJanuary 28, 2022
• yzmcms A cross-site request forgery (CSRF) in /controller/pay.class.php of YzmCMS v5.5 allows attackers... CVE-2020-19951 8.8 HighSeptember 23, 2021
• yzmcms A cross-site scripting (XSS) vulnerability in the /banner/add.html component of YzmCMS v5.3... CVE-2020-19950 4.8 MediumSeptember 23, 2021
• yzmcms A cross-site scripting (XSS) vulnerability in the /link/add.html component of YzmCMS v5.3 allows... CVE-2020-19949 4.8 MediumSeptember 23, 2021
• yzmcms YzmCMS v5.5 contains a server-side request forgery (SSRF) in the grab_image() function. CVE-2020-20341 7.5 HighSeptember 1, 2021
• yzmcms Cross Site Scripting (XSS) vulnerabiity in YzmCMS 5.2 via the site_code parameter in admin/index... CVE-2020-19118 5.4 MediumJuly 27, 2021
• yzmcms An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection... CVE-2020-35970 7.5 HighJune 3, 2021
• yzmcms A storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS... CVE-2020-35971 5.4 MediumJune 3, 2021
• yzmcms An issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user... CVE-2020-35972 4.3 MediumJune 3, 2021
• yzmcms In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribute of an... CVE-2020-23369 6.1 MediumMay 10, 2021
• yzmcms In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php... CVE-2020-23370 5.4 MediumMay 10, 2021
• yzmcms Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by... CVE-2020-18084 6.1 MediumApril 30, 2021
• yzmcms In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting ... CVE-2020-22394 6.1 MediumNovember 19, 2020
• yzmcms An HTTP Host header injection vulnerability exists in YzmCMS V5.3. A malicious user can poison a... CVE-2019-16532 6.1 MediumSeptember 26, 2019
• yzmcms admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a... CVE-2019-16678 6.5 MediumSeptember 21, 2019
• yzmcms YzmCMS 5.1 has XSS via the admin/system_manage/user_config_add.html title parameter. CVE-2018-16247 5.4 MediumJune 20, 2019
• yzmcms Stored XSS exists in YzmCMS 5.2 via the admin/system_manage/user_config_edit.html "value" parameter, CVE-2019-9661 4.8 MediumMarch 11, 2019
• yzmcms Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter. CVE-2019-9660 4.8 MediumMarch 11, 2019
• yzmcms An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin... CVE-2019-9570 4.8 MediumMarch 5, 2019
• yzmcms YzmCMS v5.2 has admin/role/add.html CSRF. CVE-2018-20015 8.8 HighDecember 10, 2018
• yzmcms An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo... CVE-2018-19849 4.8 MediumDecember 4, 2018
• yzmcms An issue was discovered in YzmCMS v5.2. It has XSS via a search/index/archives/pubtime/ query... CVE-2018-19092 6.1 MediumNovember 7, 2018
• yzmcms In YzmCMS 5.1, stored XSS exists via the admin/system_manage/user_config_add.html title parameter. CVE-2018-17044 4.8 MediumSeptember 14, 2018
• yzmcms The forgotten-password feature in index.php/member/reset/reset_email.html in YzmCMS v3.2 through... CVE-2018-11554 9.8 CriticalJune 5, 2018
• yzmcms An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add a tag via ... CVE-2018-10224 6.8 MediumApril 19, 2018
• yzmcms An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add an admin... CVE-2018-10223 6.8 MediumApril 19, 2018
• yzmcms The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr... CVE-2018-10026 4.8 MediumApril 11, 2018
• yzmcms Eval injection in yzmphp/core/function/global.func.php in YzmCMS v3.7.1 allows remote attackers... CVE-2018-8756 7.2 HighMarch 18, 2018
• yzmcms YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html. CVE-2018-8078 Public exploit 5.4 MediumMarch 13, 2018
• yzmcms In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter. CVE-2018-7653 Public exploit 6.1 MediumMarch 4, 2018
• yzmcms \application\admin\controller\update_urls.class.php in YzmCMS 3.6 has SQL Injection via the... CVE-2018-7579 7.2 HighMarch 1, 2018
• yzmcms YzmCMS 3.6 allows remote attackers to discover the full path via a direct request to application... CVE-2018-7479 5.3 MediumFebruary 26, 2018