YzmCMS Cross-site Request Forgery Vulnerability (CNVD-2022-12752)

YzmCMS is an open source CMS (Content Management System).A cross-site request spoofing vulnerability exists in YzmCMS, which stems from insufficient validation in admin.add that the request is coming from a trusted user. An attacker could use this vulnerability to spoof malicious requests to trick victims into clicking through to perform sensitive actions.