YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey (CSRF) via the component /yzmcms/comment/index/init.html.

Published Jan 28, 2022 · Updated Aug 3, 2024 · Assigned by mitre