← All advisories

Medium severity6.1NVD Advisory· Published Feb 6, 2024· Updated Jun 17, 2026

CVE-2024-24291

CVE-2024-24291

Description

An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Yzmcms/Yzmcms3 versions
cpe:2.3:a:yzmcms:yzmcms:7.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:yzmcms:yzmcms:7.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: = 7.0

Patches

Vulnerability mechanics

References

1

gitee.com/wgd0ay/wgd0ay/issues/I8WSD1nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.