PT-2025-39181 · Yzmcms · Yzmcms

CVE-2025-56304 · Published 2025-09-23 · Updated 2025-09-23

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions YzmCMS versions through 7.3

Description A cross-site scripting issue exists in YzmCMS. The issue is related to the handling of the referer header on the register page, which could allow for malicious code execution. The referer header is a vulnerable parameter.

Recommendations Update YzmCMS to a version later than 7.3.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-56304

Affected Products

Yzmcms

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/56xxx/CVE-2025-56304.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-56304 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-56304 · Security Note
• https://yzmcms.com · Note
• https://twitter.com/CVEnew/status/1970621833285378257 · Twitter Post
• http://yzmcms.com · Note
• https://gitee.com/cyjsyj/cve/wikis/CVE-2025-56304?sort_id=14635721 · Note