Files
CVEs-PoC/2022/CVE-2022-23887.md
T
2025-09-29 21:09:30 +02:00

711 B

CVE-2022-23887

Description

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily delete user accounts via /admin/admin_manage/delete.

POC

Reference

Github