Lyadmin
1 CVEs
product
Monthly
lyadmin 1.x has XSS via the config[WEB_SITE_TITLE] parameter to the /admin.php?s=/admin/config/groupsave.html URI. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
XSS
PHP
Lyadmin
NVD
GitHub
CVSS 3.1
4.8
EPSS
0.5%
EPSS 1%
CVSS 4.8
MEDIUM
POC
This Month
lyadmin 1.x has XSS via the config[WEB_SITE_TITLE] parameter to the /admin.php?s=/admin/config/groupsave.html URI. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
XSS
PHP
Lyadmin
NVD
GitHub