CVE-2024-35110
A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp/core/class/application.class.php: when logged-in users access a malicious link, th…
Published: 2024-05-17 · CVSS: 5.5 · CVSS 3.1
A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp/core/class/application.class.php: when logged-in users access a malicious link, their cookies can be captured by an attacker.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7