CVE-2019-9660: XSS
Published Mar 11, 2019
·Updated
Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter.
Affected Software
1 affected component
YzmCMS YzmCMS=5.2
Event History
Mar 11, 2019
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Data Sourced
via NVD·05:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-9660?
CVE-2019-9660 has a medium severity rating due to its potential for stored cross-site scripting attacks.
2
How do I fix CVE-2019-9660?
To fix CVE-2019-9660, update YzmCMS to the latest version or implement proper input validation and sanitization for the 'catname' parameter.
3
What types of attacks can CVE-2019-9660 lead to?
CVE-2019-9660 can lead to stored XSS attacks, allowing an attacker to inject malicious scripts that can be executed by users with access to the affected system.
4
Who is affected by CVE-2019-9660?
CVE-2019-9660 affects users running YzmCMS version 5.2.
5
Is CVE-2019-9660 a client-side or server-side vulnerability?
CVE-2019-9660 is a server-side vulnerability that affects the handling of user input in the YzmCMS application.