CVE-2020-21246

Published
View on NVD ↗
CVSS v3
5.4
MEDIUM
CVSS v2
N/A
Affected
1
PROJECT

Description

Cross Site Scripting vulnerability in YiiCMS v.1.0 allows a remote attacker to execute arbitrary code via the news function.

yiicms 是采用yii2 开发的企业站系统 http://www.qxylsb.com/
GitHubGitHub
117