Skip to content

Product

yot cms vulnerabilities

2 published CVES affecting yot cms, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest yot cms CVEs

Newest publication first

  1. CVE-2026-90709 Yot CMS Admin Console admin.php eval code injection

    Published
    MediumCVSS 5.1 EPSS 0.41%

    A security vulnerability has been detected in Yot CMS up to 3.3.1. Affected by this issue is the function eval of the file modsys/console/admin.php of the component Admin Console. Such manipulation of the argument text leads to code injection. It is possible to launch the attack...

  2. CVE-2026-90708 Yot CMS Cookie global.php login sql injection

    Published
    MediumCVSS 6.9 EPSS 0.41%

    A weakness has been identified in Yot CMS up to 3.3.1. Affected by this vulnerability is the function Login of the file global.php of the component Cookie Handler. This manipulation of the argument yot3_user/yot3_pass causes sql injection. It is possible to initiate the attack re...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.