PT-2021-10420
CVE-2020-19949
·
Published
2021-09-23
·
Updated
2021-09-29
Description by
CVSS 3.1
4.8
MediumMetricsAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
YzmCMS version 5.3
Description:
A cross-site scripting (XSS) issue in the "/link/add.html" component allows attackers to execute arbitrary web scripts or HTML.
Recommendations:
For YzmCMS version 5.3, update to a version that includes a fix for this issue, as no specific workaround is provided for this version.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾