CyberSecBulletin

YzmCMS vulnerabilities

We track 2 vulnerabilities in YzmCMS products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 6, 2024.

2vulnerabilities
1critical
1high
0exploited
8.1average CVSS score

Latest YzmCMS vulnerabilities

  • 7.1 High severity

    yzmcms: Improper Neutralization of Input During Web Page Generation

    CVE-2024-28725YzmCMS

    Cross Site Scripting (XSS) vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings.

  • 9.1 Critical severity

    Yzmcms: Improper Authentication

    CVE-2022-23383YzmCMSEPSS 1.2%

    YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is necessary to judge the user's login status before accessing the personal home page, but the vulnerability can access ot