CVE-2022-23889: Yzmcms

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to create an unusually large number of comments.

Affected products

• Yzmcms Yzmcms: version 6.3 only

Published 2022-01-28. Last modified 2026-06-17.