CVEs-PoC/2022/CVE-2022-23888.md

CVE-2022-23888

Description

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey (CSRF) via the component /yzmcms/comment/index/init.html.

POC

Reference

• https://github.com/yzmcms/yzmcms/issues/60

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon
• https://github.com/cyb3r-w0lf/nuclei-template-collection