1 results (0.004 seconds)

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1

03 Feb 2023 — Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function. • http://yzmcms.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •