Cross Site Scripting vulnerability in YiiCMS v.1.0 allows a remote attacker to execute arbitrary code via the news function.
References
Link | Resource |
---|---|
https://github.com/yongshengli/yiicms/issues/6 | Exploit Issue Tracking Patch |
Configurations
History
27 Jun 2023, 17:33
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://github.com/yongshengli/yiicms/issues/6 - Exploit, Issue Tracking, Patch | |
CPE | cpe:2.3:a:yiicms_project:yiicms:1.0:*:*:*:*:*:*:* | |
First Time |
Yiicms Project
Yiicms Project yiicms |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
CWE | CWE-79 |
20 Jun 2023, 15:49
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-06-20 15:15
Updated : 2024-02-28 20:13
NVD link : CVE-2020-21246
Mitre link : CVE-2020-21246
CVE.ORG link : CVE-2020-21246
JSON object : View
Products Affected
yiicms_project
- yiicms
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')