EUVD-2022-28812

Malicious code in bioql PyPI...

EUVD-2025-10309

Malicious code in bioql PyPI...

EUVD-2022-28814

Malicious code in bioql PyPI...

EUVD-2025-30915

Malicious code in bioql PyPI...

EUVD-2022-28813

Malicious code in bioql PyPI...

EUVD-2024-35197

Malicious code in bioql PyPI...

EUVD-2022-28463

Malicious code in bioql PyPI...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

Yzmcms 安全漏洞

Yzmcms is an open source CMS Content Management System from Yzmcms Open Source. A security vulnerability exists in Yzmcms 7.3 and earlier versions, which stems from improper handling of the referer header on the registration page and may lead to cross-site scripting attacks...

PT-2025-39181

Name of the Vulnerable Software and Affected Versions YzmCMS versions through 7.3 Description A cross-site scripting issue exists in YzmCMS. The issue is related to the handling of the referer header on the register page, which could allow for malicious code execution. The referer header is a...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

CVE-2025-56304: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

CVE-2025-56304

A Cross-site scripting (XSS) vulnerability exists in YzCMS versions through 7.3 . The root cause is the improper handling of the referer header on the register page , which could allow for malicious code execution. To remediate this issue, users are recommended to update YzCMS to a version later ...

CVE-2024-39174

A cross-site scripting XSS vulnerability in the Publish Article function of yzmcms v7.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a published article...

CVE-2024-24291

An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL...

CVE-2024-28725

Cross Site Scripting XSS vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings...

CVE-2022-23889

The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to create an unusually large number of comments...

CVE-2021-36712

Cross Site Scripting XSS vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function...