Xyhcms: Security Vulnerabilities
XYHCMS v3.6 contains a stored cross-site scripting (XSS) vulnerability in the component xyhai.php?s=/Link/index.
CVSS Score
5.4
EPSS Score
0.002
Published
2021-10-06
A cross site request forgery (CSRF) vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers to edit any information of the administrator such as the name, e-mail, and password.
CVSS Score
4.5
EPSS Score
0.001
Published
2021-07-08
xyhai.php?s=/Auth/addUser in XYHCMS 3.5 allows CSRF to add a background administrator account.
CVSS Score
8.8
EPSS Score
0.001
Published
2018-07-24