medium4.8
CVE-2020-18446
Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php.
Impact
Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yunucms | Yunucms | Version 1.1.9 |