CVE-2025-3397

A vulnerability classified as problematic has been found in YzmCMS 7.1. Affected is an unknown function of the file message.tpl. The manipulation of the argument gourl leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may...

CVE-2025-3397

A vulnerability classified as problematic has been found in YzmCMS 7.1. Affected is an unknown function of the file message.tpl. The manipulation of the argument gourl leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may...

CVE-2025-3397

creationtimestamp| type| source ---|---|--- 2025-04-08 01:46:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10809 2025-04-08 05:37:27+00:00| seen| https://t.me/cvedetector/22375...

CVE-2025-3397 YzmCMS message.tpl cross site scripting

A vulnerability classified as problematic has been found in YzmCMS 7.1. Affected is an unknown function of the file message.tpl. The manipulation of the argument gourl leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may...

CVE-2025-3397 YzmCMS message.tpl cross site scripting

A vulnerability classified as problematic has been found in YzmCMS 7.1. Affected is an unknown function of the file message.tpl. The manipulation of the argument gourl leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may...

CVE-2025-3397

Summary: CVE-2025-3397 affects YzmCMS 7.1 in an unknown function within message.tpl; manipulating the gourl argument triggers cross-site scripting. Exploitation is possible remotely and public disclosure exists. Multiple sources (CNVD/CNNVD/NVD/OSV/etc.) confirm the issue but provide no official ...