CVE-2018-17044: XSS
Published Sep 14, 2018
·Updated
In YzmCMS 5.1, stored XSS exists via the admin/systemmanage/userconfigadd.html title parameter.
Affected Software
1 affected component
YzmCMS YzmCMS=5.1
Event History
Sep 14, 2018
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-17044?
CVE-2018-17044 is classified as a moderate severity vulnerability due to its potential for stored cross-site scripting (XSS).
2
How do I fix CVE-2018-17044?
To fix CVE-2018-17044, sanitize the title parameter input on the admin/system_manage/user_config_add.html page to prevent unwanted script execution.
3
Who is affected by CVE-2018-17044?
CVE-2018-17044 affects users of Yzmcms version 5.1, specifically in the administrative interface.
4
What type of vulnerability is CVE-2018-17044?
CVE-2018-17044 is a stored cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts into the web application.
5
What are the implications of CVE-2018-17044?
Exploitation of CVE-2018-17044 could lead to unauthorized script execution in users' browsers, potentially compromising user data.