CVE-2018-17044: Yzmcms

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

In YzmCMS 5.1, stored XSS exists via the admin/system_manage/user_config_add.html title parameter.

Affected products

• Yzmcms Yzmcms: version 5.1 only

Published 2018-09-14. Last modified 2026-06-17.