CVE-2020-35972

The CVE-2020-35972 entry relates to YzmCMS V5.8 and describes a Cross-Site Request Forgery (CSRF) vulnerability in the endpoint member/member/add.html. The weakness allows an attacker to cause the creation of new member user accounts via CSRF requests, as reported across multiple sources (CNVD/CN...