CVE-2018-17322

Cross-site scripting (XSS) vulnerability in index.php/index/category/index in YUNUCMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the area parameter.

• CWE-79

• https://github.com/source-trace/yunucms/issues/1Exploit, Issue Tracking, Third Party Advisory
• https://github.com/source-trace/yunucms/issues/1Exploit, Issue Tracking, Third Party Advisory

Published

Sep 22, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17315On the RICOH MP C2003 printer, HTML Injection and Stored XSS…
• CVE-2018-17316On the RICOH MP C6003 printer, HTML Injection and Stored XSS…
• CVE-2018-17317FruityWifi (aka PatatasFritas/PatataWifi) 2.1 allows remote …
• CVE-2018-1732IBM QRadar Advisor with Watson 1.14.0 discloses sensitive in…5.3
• CVE-2018-17320An issue was discovered in UCMS 1.4.6. aaddpost.php has stor…
• CVE-2018-17321An issue was discovered in SeaCMS 6.64. XSS exists in admin_…
• CVE-2018-1733IBM QRadar SIEM 7.2 and 7.3 fails to adequately filter user-…5.3
• CVE-2018-17332An issue was discovered in libsvg2 through 2012-10-19. The s…
• CVE-2018-17333An issue was discovered in libsvg2 through 2012-10-19. A sta…
• CVE-2018-17334An issue was discovered in libsvg2 through 2012-10-19. A sta…
• CVE-2018-17336UDisks 2.8.0 has a format string vulnerability in udisks_log…
• CVE-2018-17337Intelbras NPLUG 1.0.0.14 devices have XSS via a crafted SSID…