CVE-2018-10026: XSS
Published Apr 11, 2018
·Updated
The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr parameter, related to the valid function in application/wechat/controller/index.class.php.
Affected Software
1 affected component
YzmCMS YzmCMS=3.7.1
Event History
Apr 11, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-10026?
CVE-2018-10026 is classified as a reflected XSS vulnerability.
2
How do I fix CVE-2018-10026?
To fix CVE-2018-10026, validate and sanitize input values in the echostr parameter before processing them.
3
What software versions are affected by CVE-2018-10026?
CVE-2018-10026 affects YzmCMS version 3.7.1.
4
What is reflected XSS in the context of CVE-2018-10026?
Reflected XSS in CVE-2018-10026 refers to an attack where malicious scripts are injected and executed within a user's browser through the affected parameter.
5
Where in the code can CVE-2018-10026 be found?
CVE-2018-10026 is related to the valid function in application/wechat/controller/index.class.php.