Beveiligingsadvies

CVE-2024-35110

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-17 08:00:44

Laatst bijgewerkt 2025-02-13 15:54:04

Toegewezen door mitre

CVSS-score 5.5

Status PUBLISHED

Beschrijving

A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp/core/class/application.class.php: when logged-in users access a malicious link, their cookies can be captured by an attacker.

← Alle CVE's bekijken Bekijk op cve.org ↗