YzmCMS 5.6

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:yzmcms:yzmcms:5.6:*:*:*:*:*:*:*

part: a version: 5.6 update: *

VendorYzmcms (1cffbf8e-ed13-541a-9573-bd90e7ed7d32)
ProductYzmcms (feae22af-fb59-5c95-949a-ed2cecbd55b3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/yzmcms/yzmcms purl2cpe 2026-06-01 10:11:22.492273

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-23595 vulnerable 2026-06-08 05:22:31.995207 Details available
Cross Site Request Forgery (CSRF) vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint.
Published: 2023-08-11T00:00:00.000Z
Updated: 2024-10-09T19:26:54.221Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-23370 vulnerable 2026-06-08 05:22:31.905965 Details available
In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which allows remote attackers to upload a swf file. The swf file can be injected with arbitrary web script or HTML.
Published: 2021-05-10T22:14:03.000Z
Updated: 2024-08-04T14:58:14.990Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-23369 vulnerable 2026-06-08 05:22:31.905445 Details available
In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribute of an IFRAME element because of using UEditor 1.4.3.3.
Published: 2021-05-10T22:14:11.000Z
Updated: 2024-08-04T14:58:15.094Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.