EIP-2026-114559

This exploit demonstrates a persistent XSS vulnerability in YzmCMS 5.5 by injecting a malicious JavaScript payload into the 'url' parameter of the link addition functionality. The PoC includes a crafted HTTP POST request that bypasses input filtering and executes arbitrary JavaScript in the context of the application.