← Back to CVE List

CVE-2020-19951

Published: 2021-09-23T20:15Z
Last Modified: 2024-11-21T05:09Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
A cross-site request forgery (CSRF) in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt