1 results (0.003 seconds)

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1

Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary code via the token check function. • http://www.yzmcms.com https://github.com/yzmcms/yzmcms/issues/27 • CWE-352: Cross-Site Request Forgery (CSRF) •