CVE-2021-36712

Published February 3rd, 2023

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function.

linuka-deception/yzmcms6.1UNAVAILABLE

GitHub