Cross site request forgery (csrf)

2021-06-0321:15:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.4%

An issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user accounts via member/member/add.html.

CPENameOperatorVersion
yzmcmseq5.8

CPE	Name	Operator	Version
	yzmcms	eq	5.8

References

github.com/yzmcms/yzmcms/issues/55