CVE-2022-23384

YzmCMS v6.3 is affected by Cross Site Request Forgery CSRF in /admin.add...

Cross site request forgery (csrf)

YzmCMS v6.3 is affected by Cross Site Request Forgery CSRF in /admin.add...

CVE-2022-23384

YzmCMS v6.3 is affected by Cross Site Request Forgery CSRF in /admin.add...

CVE-2022-23384

YzmCMS v6.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability in /admin.add. The CVE entry (CVE-2022-23384) is described across multiple sources as facilitating CSRF, enabling an attacker to spoof requests from victims and potentially trigger sensitive actions. The NVD metrics show...

YzmCMS 跨站请求伪造漏洞

YzmCMS is an open source CMS Content Management System.A cross-site request spoofing vulnerability exists in YzmCMS, which stems from insufficient validation in admin.add that the request is coming from a trusted user. An attacker could use this vulnerability to spoof malicious requests to trick...