YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. A cross-site request forgery vulnerability exists in /controller/pay.class.php in YzmCMS version 5.5. An attacker can use this vulnerability to access sensitive components of the application.
CPE | Name | Operator | Version |
---|---|---|---|
yzmcms yzmcms | eq | 5.5 |