CVE-2025-64048

The YCCMS 3.4 content management system contains a stored cross-site scripting (XSS) vulnerability within the article management functionality. The flaw resides in the add() and getPost() functions of the ArticleAction.class.php file, caused by the improper neutralization of user input in the art...