An issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user accounts via member/member/add.html.

Published Jun 3, 2021 · Updated Aug 4, 2024 · Assigned by mitre