Vulnerabilities > Yuba > U5Cms > 8.3.5

DATE CVE VULNERABILITY TITLE RISK
2022-06-17 CVE-2022-32442 Cross-site Scripting vulnerability in Yuba U5Cms 8.3.5
u5cms version 8.3.5 is vulnerable to Cross Site Scripting (XSS).
network
yuba CWE-79
4.3
2022-06-17 CVE-2022-32444 Open Redirect vulnerability in Yuba U5Cms 8.3.5
An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php.
network
yuba CWE-601
5.8