member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header.
References
Link | Resource |
---|---|
https://github.com/yzmcms/yzmcms/issues/65 | Exploit Issue Tracking |
https://github.com/yzmcms/yzmcms/tags | Product |
https://github.com/yzmcms/yzmcms/issues/65 | Exploit Issue Tracking |
https://github.com/yzmcms/yzmcms/tags | Product |
Configurations
History
21 Nov 2024, 08:39
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/yzmcms/yzmcms/issues/65 - Exploit, Issue Tracking | |
References | () https://github.com/yzmcms/yzmcms/tags - Product |
16 Jan 2024, 23:59
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-79 | |
First Time |
Yzmcms yzmcms
Yzmcms |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
CPE | cpe:2.3:a:yzmcms:yzmcms:*:*:*:*:*:*:*:* | |
References | () https://github.com/yzmcms/yzmcms/tags - Product | |
References | () https://github.com/yzmcms/yzmcms/issues/65 - Exploit, Issue Tracking |
11 Jan 2024, 03:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-01-11 03:15
Updated : 2024-11-21 08:39
NVD link : CVE-2023-52274
Mitre link : CVE-2023-52274
CVE.ORG link : CVE-2023-52274
JSON object : View
Products Affected
yzmcms
- yzmcms
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')