medium5.4
CVE-2020-35971
A storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS code and attack malicious XSS on the /admin/system_manage/user…
Impact
A storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS code and attack malicious XSS on the /admin/system_manage/user_config_edit.html page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yzmcms | Yzmcms | Version 5.8 |