Skip to content

Vendor

yot vulnerabilities

3 published CVES affecting yot, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
1
Medium
2
Low
0
Unscored
0
CISA KEV
0
Atom feed of yot alerts

Products

Latest yot CVEs

Newest publication first

  1. CVE-2026-90709 Yot CMS Admin Console admin.php eval code injection

    Published
    MediumCVSS 5.1 EPSS 0.41%

    A security vulnerability has been detected in Yot CMS up to 3.3.1. Affected by this issue is the function eval of the file modsys/console/admin.php of the component Admin Console. Such manipulation of the argument text leads to code injection. It is possible to launch the attack...

  2. CVE-2026-90708 Yot CMS Cookie global.php login sql injection

    Published
    MediumCVSS 6.9 EPSS 0.41%

    A weakness has been identified in Yot CMS up to 3.3.1. Affected by this vulnerability is the function Login of the file global.php of the component Cookie Handler. This manipulation of the argument yot3_user/yot3_pass causes sql injection. It is possible to initiate the attack re...

  3. CVE-2018-25425 Yot CMS 3.3.1 SQL Injection via aid and cid Parameters

    Published
    HighCVSS 8.8 EPSS 0.27%

    Yot CMS 3.3.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid and cid parameters. Attackers can send GET requests to index.php with crafted SQL payloads in the aid or cid pa...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.