Vulnerabilities

TI-2025-39515 CVE-2025-64048 · GHSA-gqhq-jq86-hm7f

YCCMS 3.4 contains a stored cross-site scripting (XSS) vulnerability in the article…

LOW 27

YCCMS 3.4 contains a stored cross-site scripting (XSS) vulnerability in the article management functionality.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00194 Published 2025-11-24 No fix listed CWE-79

TI-2020-13819 CVE-2020-20287 · GHSA-2fqw-v698-338m

MEDIUM 47

Unrestricted file upload vulnerability in the yccms 3.3 project.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02949 Published 2021-02-01 No fix listed CWE-434

TI-2020-13820 CVE-2020-20289 · GHSA-vhv9-x6wj-xx42

MEDIUM 44

Sql injection vulnerability in the yccms 3.3 project.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01147 Published 2021-02-01 No fix listed CWE-89

TI-2020-13821 CVE-2020-20290 · GHSA-7fxc-vwm3-9www

LOW 36

Directory traversal vulnerability in the yccms 3.3 project.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01346 Published 2021-02-01 No fix listed CWE-22