CSRF Vulnerability in YxCMS v1.3.7

YXcms is a website management system based on PHP+MySql with a lightweight MVC design model. A CSRF vulnerability exists in the controller call location of YxCMS version 1.3.7. An attacker can exploit the vulnerability to write arbitrary code, and can use the edited php template file to replace t...