CVE-2020-19951

A cross-site request forgery CSRF in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application...

PT-2021-10422

Name of the Vulnerable Software and Affected Versions: YzmCMS version 5.5 Description: A cross-site request forgery CSRF issue in the /controller/pay.class.php component allows attackers to access sensitive parts of the application. Recommendations: For YzmCMS version 5.5, consider implementing...

CVE-2020-19951: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application...