← All advisories

Medium severity6.1NVD Advisory· Published Sep 23, 2025· Updated Jul 5, 2026

CVE-2025-56304

CVE-2025-56304

Description

Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 via the referer header in the register page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Yzmcms/Yzmcmscpe-rescue3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:yzmcms:yzmcms:*:*:*:*:*:*:*:*range: <=7.3
- (no CPE)range: <=7.3

Patches

Vulnerability mechanics

References

1

www.yzmcms.comnvdProduct

News mentions

0

No linked articles in our index yet.