Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 via the referer header in the register page.
CVSS Score
6.1
EPSS Score
0.0
Published
2025-09-23
An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add an admin account via /index.php/admin/admin_manage/add.html.
CVSS Score
6.8
EPSS Score
0.001
Published
2018-04-19
An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add a tag via /index.php/admin/tag/add.html.
CVSS Score
6.8
EPSS Score
0.001
Published
2018-04-19