An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add a tag via /index.php/admin/tag/add.html.Referenceshttps://github.com/yzmcms/yzmcms/issues/2http://www.8sec.cc/archives/601