CVE-2023-52274 - member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header

MEDIUM

member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header

Published Jan 11, 2024

6.1

MEDIUM

CVSS 3.1

EPSS 0.36%

member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-56947		Advisory
https://github.com/yzmcms/yzmcms/issues/65		ExploitIssue Tracking
https://github.com/yzmcms/yzmcms/tags		Product

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jan 11, 2024

Updated Jun 17, 2025

Reserved Dec 31, 2023

Updated Jan 11, 2024

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Jan 11, 2024

Updated Jun 17, 2025

Exploited since n/a