CVE-2019-5311: Yunucms

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered in YUNUCMS V1.1.8. app/index/controller/Show.php has an XSS vulnerability via the index.php/index/show/index cw parameter.

Affected products

• Yunucms Yunucms: version 1.1.8 only

Published 2019-01-04. Last modified 2026-06-17.