← Database

CVE-2024-57052

CRITICAL CVSS: 9.8 Published: 2025-01-27 Modified: 2026-06-17

Description

An issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate privileges via the sessionID parameter in the index.php file.

Affected Platforms

Youdiancms Youdiancms

Weakness Type

CWE-384

References