PT-2026-91171 · Yot · Cms

·

CVE-2026-90709

·

Publicado

2026-09-14

·

Atualizado

2026-09-14

CVSS v2.0

5.8

Média

VetorAV:N/AC:L/Au:M/C:P/I:P/A:P
A security vulnerability has been detected in Yot CMS up to 3.3.1. Affected by this issue is the function eval of the file modsys/console/admin.php of the component Admin Console. Such manipulation of the argument text leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Exploit

Correção

Code Injection

Special Elements Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2026-90709

Produtos afetados

Cms