PT-2025-39181 · Yzmcms · Yzmcms

Published 2025-09-23 · Updated 2025-09-23 · CVE-2025-56304

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions YzmCMS versions through 7.3

Description A cross-site scripting issue exists in YzmCMS. The issue is related to the handling of the referer header on the register page, which could allow for malicious code execution. The referer header is a vulnerable parameter.

Recommendations Update YzmCMS to a version later than 7.3.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-56304

Affected Products

Yzmcms

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-56304 · Security Note
• https://osv.dev/vulnerability/CVE-2025-56304 · Vendor Advisory
• https://gitee.com/cyjsyj/cve/wikis/CVE-2025-56304?sort_id=14635721 · Note
• https://yzmcms.com · Note
• http://yzmcms.com · Note
• https://twitter.com/CVEnew/status/1970621833285378257 · Twitter Post