YzmCMS 7.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:yzmcms:yzmcms:7.0:*:*:*:*:*:*:*

part: a version: 7.0 update: *

VendorYzmcms (1cffbf8e-ed13-541a-9573-bd90e7ed7d32)
ProductYzmcms (feae22af-fb59-5c95-949a-ed2cecbd55b3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/yzmcms/yzmcms purl2cpe 2026-06-01 10:11:22.492282

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-28725 vulnerable 2026-06-08 06:33:27.148165 Details available
Cross Site Scripting (XSS) vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings.
Published: 2024-05-06T00:00:00.000Z
Updated: 2024-08-02T00:56:58.114Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24291 vulnerable 2026-06-08 06:29:41.213405 Details available
An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL.
Published: 2024-02-06T00:00:00.000Z
Updated: 2025-04-24T15:51:28.453Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.