CVE-2026-29933

CVSS Score & Metrics

Base Score

6.1 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N                                    

Vulnerability Description

A reflected cross-site scripting (XSS) vulnerability in the /index/login.html component of YZMCMS v7.4 allows attackers to execute arbitrary Javascript in the context of the user's browser via modifying the referrer value in the request header.

Vulnerability Details

Published Date

March 26, 2026

Last Modified

March 31, 2026

CWE ID

CWE-79

Source

NVD

Vendor

yzmcms

Product

yzmcms

External References

https://github.com/yzmcms/yzmcms/issues/69

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment