PT-2021-10172

CVE-2020-18445

Published

2021-08-12

Updated

2021-08-13

CVSS 3.1

6.1

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: YUNUCMS version 1.1.9

Description: A Cross Site Scripting (XSS) issue exists via the upurl function in Page.php. This allows for potential malicious script execution.

Recommendations: For YUNUCMS version 1.1.9, consider disabling the upurl function in Page.php until a patch is available to prevent exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾