CVE-2018-10223

An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add an admin account via /index.php/admin/admin_manage/add.html.

Date published : 2018-04-19

http://www.8sec.cc/archives/596

https://github.com/yzmcms/yzmcms/issues/1