CVE-2020-18084

Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to…

published April 30, 2021

CVSS
—
EPSS
1%
Percentile
70.5
In the wild
Unconfirmed
What it is

Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01315 · 70.5th percentile
Published
2021-04-30T20:37Z
EPSS history
Timeline
  • 30 APR 20:37Z
    Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to…
    cvelistv5