CVE-2023-52274: Improper Neutralization of Input During Web Page Generation

member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header...

PT-2024-14503

Name of the Vulnerable Software and Affected Versions YzmCMS versions 6.5 through 7.0 Description The issue allows for XSS via the Referer HTTP header in the member/index/register.html page. Recommendations For YzmCMS versions 6.5 through 7.0, consider restricting access to the...