CVE-2020-23369: Yzmcms

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribute of an IFRAME element because of using UEditor 1.4.3.3.

Affected products

• Yzmcms Yzmcms: version 5.6 only

Published 2021-05-10. Last modified 2026-06-17.