CVE-2020-19962
A stored cross-site scripting (XSS) vulnerability in the getClientIp function…
A stored cross-site scripting (XSS) vulnerability in the getClientIp function…
An XML External Entity (XXE) vulnerability was discovered in /api/notify.php…
A cross-site request forgery (CSRF) in /controller/pay.class.php of YzmCMS v5.5…