Vulnerabilities

TI-2026-61666 CVE-2026-90709 · GHSA-cjwg-q7rf-chx4

Yot CMS Admin Console admin.php eval code injection

MEDIUM 56

A security vulnerability has been detected in Yot CMS up to 3.3.1.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00412 Published 2026-09-14 No fix listed CWE-74

TI-2026-61665 CVE-2026-90708 · GHSA-jj9m-58h5-28w9

Yot CMS Cookie global.php login sql injection

HIGH 70

A weakness has been identified in Yot CMS up to 3.3.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00411 Published 2026-09-14 No fix listed CWE-74

TI-2018-15650 CVE-2018-25425 · GHSA-g765-xx5q-xfgr

Yot CMS 3.3.1 SQL Injection via aid and cid Parameters

HIGH 77

Yot CMS 3.3.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid and cid parameters.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0027 Published 2026-05-30 No fix listed CWE-89

Vulnerabilities

Filters

Yot CMS Admin Console admin.php eval code injection

Yot CMS Cookie global.php login sql injection

Yot CMS 3.3.1 SQL Injection via aid and cid Parameters