lingyun vulnerabilities

Products

• lyadmin 1

Latest lingyun CVEs

Newest publication first

1. CVE-2018-7547 lyadmin 1.x has XSS via the config[WEB_SITE_TITLE] parameter to the /admin.php?s=/admin/config/groupsave.html URI.

   Published 2018-02-27

   Medium·CVSS 4.8 EPSS 0.52%

   lyadmin 1.x has XSS via the config[WEB_SITE_TITLE] parameter to the /admin.php?s=/admin/config/groupsave.html URI.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.