CVE-2018-8078

Name of the Vulnerable Software and Affected Versions: YzmCMS version 3.7

Description: The issue is related to Stored XSS, which occurs via the title parameter to the "advertisement/adver/edit.html" endpoint.

Recommendations: For YzmCMS version 3.7, update the software to a version that includes a fix for this issue, or as a temporary workaround, consider restricting access to the "advertisement/adver/edit.html" endpoint to minimize the risk of exploitation. Avoid using the title parameter in the affected endpoint until the issue is resolved.