Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in YzmCMS up to 7.5. This affects an unknown function of the file /application/install/index.php. Executing a manipulation of the argument siteurl can lead to sql injection. The attack can be executed remotely. A high complexity level is associated with this attack. The exploitability is reported as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-13529 SQL Injection in YzmCMS Up to 7.5 via Siteurl Parameter Manipulation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-13529
Post summary
The text announces a SQL injection vulnerability (CVE‑2026‑13529) in YzmCMS up to version 7.5, with limited technical details and no PoC, exploit, or patch information available.