medium6.5
CVE-2020-20502
Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary code via the token check function.
Impact
Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary code via the token check function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yzmcms | Yzmcms | Version 2.0 |