medium4.8
CVE-2018-10026
The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr parameter, related to the valid function in application/wechat/contr…
Impact
The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr parameter, related to the valid function in application/wechat/controller/index.class.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yzmcms | Yzmcms | Version 3.7.1 |