high8.8
CVE-2022-23888
YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey (CSRF) via the component /yzmcms/comment/index/init.html.
Impact
YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey (CSRF) via the component /yzmcms/comment/index/init.html.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yzmcms | Yzmcms | Version 6.3 |