CVE-2018-10128: Xyhcms Project Xyhcms

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in XYHCMS 3.5. It has XSS via the test parameter to index.php.

Affected products

• Xyhcms Project Xyhcms: version 3.5 only

Published 2018-04-16. Last modified 2026-06-17.