CVE-2021-36712

MEDIUM CVSS: 5.4 Published: 2023-02-03 Modified: 2026-07-09

Description

Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function.

Affected Platforms

Yzmcms Yzmcms

Weakness Type

CWE-79, CWE-79

References