Vulnerability CVE-2024-35110


Published: 2024-05-17

Description:
A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp/core/class/application.class.php: when logged-in users access a malicious link, their cookies can be captured by an attacker.

 References:
https://github.com/yzmcms/yzmcms/issues/68

Copyright 2026, cxsecurity.com

 

Back to Top