CVE-2018-10223: Yzmcms

Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add an admin account via /index.php/admin/admin_manage/add.html.

Affected products

• Yzmcms Yzmcms: version 3.8 only

Published 2018-04-19. Last modified 2026-06-17.