Design/Logic Flaw

2024-01-1103:15:00

PRIOn knowledge base

www.prio-n.com

xss

yzmcms

member register

security flaw

6.1 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header.

CPENameOperatorVersion
yzmcmsge6.5
yzmcmsle7.0

CPE	Name	Operator	Version
	yzmcms	ge	6.5
	yzmcms	le	7.0

References

github.com/yzmcms/yzmcms/issues/65

github.com/yzmcms/yzmcms/tags