Cross site request forgery (csrf)

2018-04-1908:29:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add a tag via /index.php/admin/tag/add.html.

CPENameOperatorVersion
yzmcmseq3.8

CPE	Name	Operator	Version
	yzmcms	eq	3.8

References

www.8sec.cc/archives/601

github.com/yzmcms/yzmcms/issues/2