An HTTP Host header injection vulnerability exists in YzmCMS V5.3. A malicious user can poison a web cache or trigger redirections.Referenceshttps://www.exploit-db.com/exploits/47422https://github.com/yzmcms/yzmcms/issues/28