ZZ
Product
ZZCMS
106
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 33High 48Medium 24Low 1
Watch
Add ZZCMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-17798 | 6.5 | Sep 30 | An issue was discovered in zzcms 8.3 Affected: 8.3 |
| CVE-2018-17797 | 6.5 | Sep 30 | An issue was discovered in zzcms 8.3 Affected: 8.3 |
| CVE-2025-1949 | 6.1 | Mar 4 | ZZCMS URL register_nodb.php cross site scripting Affected: 2025 |
| CVE-2024-44820 | 6.1 | Sep 4 | A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the eginfo.php file located at /3/E_bak5.1/upload/ Affected: through 2023 |
| CVE-2024-44819 | 6.1 | Sep 4 | Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via a crafted script to the pagename parameter of the… Affected: through 2023 |
| CVE-2020-19042 | 6.1 | Dec 13 | Cross Site Scripting (XSS) vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php Affected: 2019 |
| CVE-2018-17413 | 6.1 | Mar 7 | XSS exists in zzcms v8.3 via the /uploadimg_form.php noshuiyin parameter Affected: 8.3 |
| CVE-2024-44818 | 5.4 | Sep 4 | Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the HTTP_Referer header of the caina.php component Affected: through 2023 |
| CVE-2024-43006 | 5.4 | Aug 16 | A stored cross-site scripting (XSS) vulnerability exists in ZZCMS2023 in the ask/show.php file at line 21 Affected: 2023 |
| CVE-2022-44361 | 5.4 | Dec 7 | An issue was discovered in ZZCMS 2022 Affected: 2022 |
| CVE-2020-35973 | 5.4 | Jun 3 | An issue was discovered in zzcms2020 Affected: 2020 |
| CVE-2020-20285 | 5.4 | Dec 18 | There is a XSS in the user login page in zzcms 2019 Affected: 2019 |
| CVE-2019-9078 | 5.4 | Feb 24 | zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT Affected: 2019 |
| CVE-2018-14962 | 5.4 | Aug 6 | zzcms 8.3 has stored XSS related to the content variable in user/manage.php and zt/show.php Affected: 8.3. |
| CVE-2024-44821 | 5.3 | Sep 4 | ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php Affected: through 2023 |
| CVE-2022-40444 | 5.3 | Sep 22 | ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? _server Affected: 2022 |
| CVE-2022-40443 | 5.3 | Sep 22 | An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php Affected: 2022 |
| CVE-2021-45286 | 5.3 | Feb 9 | Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1) index.php, 2) bottom.php, and 3) top_index.php Affected: 2021 |
| CVE-2018-7434 | 5.3 | Feb 24 | zzcms 8.2 allows remote attackers to discover the full path via a direct request to 3/qq_connect2.0/API/class/ErrorCase.class.php or 3/ucenter_api/code/friend.php Affected: 8.2 |
| CVE-2024-43011 | 4.9 | Aug 16 | An arbitrary file deletion vulnerability exists in the admin/del.php file at line 62 in ZZCMS 2023 and earlier Affected: through 2023 |
| CVE-2024-11130 | 4.8 | Nov 12 | ZZCMS msg.php cross site scripting Affected: through 2023 |
| CVE-2021-46437 | 4.8 | Apr 8 | An issue was discovered in ZZCMS 2021 Affected: 2021 |
| CVE-2024-43009 | 4.7 | Aug 16 | A reflected cross-site scripting (XSS) vulnerability exists in user/login.php at line 24 in ZZCMS 2023 and earlier Affected: through 2023 |
| CVE-2024-43005 | 4.7 | Aug 16 | A reflected cross-site scripting (XSS) vulnerability in the component dl_liuyan_save.php of ZZCMS v2023 allows attackers to execute arbitrary code in the context of a user's… Affected: 2023 |
Showing 24