CVE-2021-36712 - Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function

MEDIUM

Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function

Published Feb 3, 2023

5.4

MEDIUM

CVSS 3.1

EPSS 0.45%

Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-23306		Advisory
https://github.com/linuka-deception/yzmcms6.1.git		ExploitThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 3, 2023

Updated Jul 9, 2026

Reserved Jul 12, 2021

CISA Vulnrichment

Updated Mar 26, 2025

NVD

Status Modified

Modified Jul 9, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Feb 3, 2023

Updated Jul 9, 2026

GitHub

No data