Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Yzmcms 跨站脚本漏洞
Vulnerability Description
Yzmcms是Yzmcms个人开发者的一套开源的CMS（内容管理系统）。 yzmCMS v5.2 存在跨站脚本漏洞，远程攻击者可利用该漏洞在登录时通过向组件“成员索引login.html”的POST请求的“referer”字段注入命令来执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A