Cross-site Scripting Flaw in YzmCMS by YzmCMS Team

CVE-2025-56304

What is CVE-2025-56304?

The vulnerability identified in YzmCMS allows attackers to exploit cross-site scripting through the referer header on the registration page. By injecting malicious scripts, unauthorized users can manipulate and execute code in the context of other users, potentially compromising user data and session integrity. This flaw highlights the importance of validating and sanitizing inputs in web applications to protect users from such malicious attacks.

References