PT-2022-16312

Name of the Vulnerable Software and Affected Versions YzmCMS version 6.3 Description A Cross-Site Request Forgery CSRF issue allows attackers to arbitrarily delete user accounts via the /admin/admin manage/delete API endpoint. This enables unauthorized modifications to user accounts...