CVE-2020-35970: Yzmcms

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows arbitrary file read.

Affected products

• Yzmcms Yzmcms: version 5.8 only

Published 2021-06-03. Last modified 2026-06-17.