CVE:CVE-2020-18446
CNNVD:CNNVD-202108-1184
YUNUCMS是一个网站CMS。
YUNUCMS 1.1.9中存在跨站脚本漏洞，该漏洞源于ContentModel.php中insertContent函数中的param参数。
solution:Upgrade yunucms yunucms to a higher version than 1.1.9,and avoid the version 1.1.9