PT-2021-11888

Name of the Vulnerable Software and Affected Versions: YzmCMS version 5.8 Description: An issue was discovered that allows for a CSRF vulnerability, enabling the addition of member user accounts via the "member/member/add.html" API endpoint. The estimated number of potentially affected devices...

CVE-2020-35972: Cross-Site Request Forgery (CSRF)

An issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user accounts via member/member/add.html...