XSS Vulnerability in YzmCMS 5.5 Affects User Contributions
CVE-2020-22394

6.1MEDIUM

Key Information:

Vendor: Yzmcms
Status: Yzmcms
Vendor: CVE Published:; 19 November 2020

What is CVE-2020-22394?

In YzmCMS version 5.5, a cross-site scripting (XSS) vulnerability exists within the member contribution feature of the editor. This weakness allows attackers to inject malicious scripts into web pages viewed by other users, potentially compromising their session and sensitive data. Proper validation and sanitization measures should be implemented to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/yzmcms/yzmcms/issues/42

x_refsource_MISC

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 19, 2020
Vulnerability Reserved
Aug 13, 2020

JSON

Yzmcms

What is CVE-2020-22394?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.