CVE-2020-35972

2021-06-0321:15:07

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.4%

An issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user accounts via member/member/add.html.

CPENameOperatorVersion
yzmcmseq5.3.0
yzmcmseq5.8

CPE	Name	Operator	Version
	yzmcms	eq	5.3.0
	yzmcms	eq	5.8

References

github.com/yzmcms/yzmcms/issues/55