CVE-2020-18446 – Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the

Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18446

Reference (s):

• https://github.com/doublefast/yunucms/issues/9