CVE-2021-36712

MediumCVSS 5.4

Published: 03/02/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

36th percentile - higher than 36% of all known CVEs

Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via the image clipping function.

An attacker can hijack user sessions, gaining unauthorized access to accounts and data within the system.

Update yzmcms to the latest version and implement input sanitization in the image clipping function.

Original NVD description (English source)

Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function.