CVE-2019-9661: XSS
Published Mar 11, 2019
·Updated
Stored XSS exists in YzmCMS 5.2 via the admin/systemmanage/userconfigedit.html "value" parameter,
Affected Software
1 affected component
YzmCMS YzmCMS=5.2
Event History
Mar 11, 2019
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Data Sourced
via NVD·05:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-9661?
CVE-2019-9661 is classified as a medium severity stored cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2019-9661?
To remediate CVE-2019-9661, ensure that user inputs in the admin panel are properly sanitized and validated.
3
What systems are affected by CVE-2019-9661?
CVE-2019-9661 affects YzmCMS version 5.2.
4
What kind of vulnerability is CVE-2019-9661?
CVE-2019-9661 is a stored cross-site scripting (XSS) vulnerability.
5
Can CVE-2019-9661 lead to data breaches?
Yes, CVE-2019-9661 can potentially lead to data breaches if exploited, as it allows attackers to execute scripts in the context of an affected user.