CVE-2022-23888: Yzmcms

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey (CSRF) via the component /yzmcms/comment/index/init.html.

Affected products

• Yzmcms Yzmcms: version 6.3 only

Published 2022-01-28. Last modified 2026-06-17.