Yccms

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Yccms records in CISA KEV

No Yccms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Yccms · all components

TI-2020-13819 CVE-2020-20287 · GHSA-2fqw-v698-338m

MEDIUM 47

Unrestricted file upload vulnerability in the yccms 3.3 project.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02949 Published 2021-02-01 No fix listed CWE-434

TI-2020-13820 CVE-2020-20289 · GHSA-vhv9-x6wj-xx42

MEDIUM 44

Sql injection vulnerability in the yccms 3.3 project.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01147 Published 2021-02-01 No fix listed CWE-89

TI-2020-13821 CVE-2020-20290 · GHSA-7fxc-vwm3-9www

LOW 36

Directory traversal vulnerability in the yccms 3.3 project.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01346 Published 2021-02-01 No fix listed CWE-22

TI-2025-39515 CVE-2025-64048 · GHSA-gqhq-jq86-hm7f

LOW 27

YCCMS 3.4 contains a stored cross-site scripting (XSS) vulnerability in the article management functionality.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00194 Published 2025-11-24 No fix listed CWE-79