RSS   Vulnerabilities for 'Xyhcms'   RSS

2021-10-06
 
CVE-2020-21656

CWE-79
 

 
XYHCMS v3.6 contains a stored cross-site scripting (XSS) vulnerability in the component xyhai.php?s=/Link/index.

 
2021-07-08
 
CVE-2020-20586

CWE-352
 

 
A cross site request forgery (CSRF) vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers to edit any information of the administrator such as the name, e-mail, and password.

 
2018-07-24
 
CVE-2018-14583

CWE-352
 

 
xyhai.php?s=/Auth/addUser in XYHCMS 3.5 allows CSRF to add a background administrator account.

 


Copyright 2024, cxsecurity.com

 

Back to Top