Cross Site Scripting (XSS) vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')