An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add a tag via /index.php/admin/tag/add.html.
- https://github.com/yzmcms/yzmcms/issues/2
No PoCs found on GitHub currently.