Security Advisory

CVE-2022-23887

6.5
MEDIUM

Vulnerability Description

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily delete user accounts via /admin/admin_manage/delete.
Published Date January 28, 2022
Official Source NIST NVD Advisory