CVE-2023-52274

Summary

CVE-2023-52274 is a newly discovered cross-site scripting (XSS) vulnerability affecting the member/index/register.html page in YzmCMS versions 6.5 through 7.0. This issue allows malicious actors to inject and execute malicious scripts in a victim's web browser by manipulating the Referer HTTP header. An attacker can potentially steal sensitive information or take control of the user's session. To mitigate this risk, YzmCMS users are advised to upgrade to the latest version or implement appropriate HTTP headers to block malicious scripts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.