| |
Vulnerability CVE-2023-37131
Published: 2023-07-06
| Description: |
A Cross-Site Request Forgery (CSRF) in the component /public/admin/profile/update.html of YznCMS v1.1.0 allows attackers to arbitrarily change the Administrator password via a crafted POST request. |
References: |
https://github.com/ken678/yzncms/issues/2
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
