Priority LOW 23
Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00527 · Published 2021-08-12 · No fix listed CWE-79
Priority LOW 28
Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00717 · Published 2021-08-12 · No fix listed CWE-79
Priority LOW 28
An issue was discovered in YUNUCMS V1.1.8.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00675 · Published 2019-01-04 · No fix listed CWE-79
Priority LOW 28
YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by site_title in an admin/system/basic POST request.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00675 · Published 2019-01-04 · No fix listed CWE-79
Priority LOW 36
statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/controller.php?action=remove key parameter, as demonstrated by using directory traversal to delete th…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01449 · Published 2018-11-11 · No fix listed CWE-22
Priority MEDIUM 45
statics/app/index/controller/Install.php in YUNUCMS 1.1.5 (if install.lock is not present) allows remote attackers to execute arbitrary PHP code by placing this code in the index.php?s=index/install/setup2 DB_PREFIX fiel…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01508 · Published 2018-11-11 · No fix listed CWE-94
Priority LOW 23
An XSS issue was discovered in admin/sitelink/editsitelink?id=16 in YUNUCMS 1.1.5.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00559 · Published 2018-10-28 · No fix listed CWE-79
Priority LOW 23
An XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00559 · Published 2018-10-28 · No fix listed CWE-79
Priority LOW 23
An XSS issue was discovered in index.php/admin/category/editcategory?id=73 in YUNUCMS 1.1.5.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00559 · Published 2018-10-28 · No fix listed CWE-79
Priority LOW 23
An XSS issue was discovered in index.php/admin/area/editarea/id/110000 in YUNUCMS 1.1.5.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00559 · Published 2018-10-28 · No fix listed CWE-79
Priority LOW 23
An XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00559 · Published 2018-10-28 · No fix listed CWE-79
Priority LOW 23
An XSS issue was discovered in admin/link/editlink?id=5 in YUNUCMS 1.1.5.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00559 · Published 2018-10-28 · No fix listed CWE-79
Priority LOW 23
An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00559 · Published 2018-10-28 · No fix listed CWE-79
Priority LOW 29
Cross-site scripting (XSS) vulnerability in index.php/index/category/index in YUNUCMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the area parameter.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00756 · Published 2018-09-22 · No fix listed CWE-79
Priority LOW 23
YUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/## page (aka a news center page).
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00516 · Published 2018-04-10 · No fix listed CWE-79
THREATIST.IORead the docs