Known Vulnerabilities for YzmCMS by Na
Listed below are 5 of the newest known vulnerabilities associated with "YzmCMS" by "Na".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-15202 json | A security vulnerability has been detected in YzmCMS up to 7.5. Affected is the function get_url of the file /yzmphp/yzmphp.p... | Not Provided | 2026-07-09 | 2026-07-09 |
| CVE-2026-13529 json | A vulnerability was determined in YzmCMS up to 7.5. This affects an unknown function of the file /application/install/index.p... | Not Provided | 2026-06-29 | 2026-06-29 |
| CVE-2025-56304 json | Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 via the referer header in the register page. | Not Provided | 2025-09-23 | 2026-07-05 |
| CVE-2022-23383 json | YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be ... | Not Provided | 2022-03-10 | 2026-07-09 |
| CVE-2021-36712 json | Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function. | Not Provided | 2023-02-03 | 2026-07-09 |