CVE-2018-10224: Yzmcms

Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add a tag via /index.php/admin/tag/add.html.

Affected products

• Yzmcms Yzmcms: version 3.8 only

Published 2018-04-19. Last modified 2026-06-17.