ZZ
Product
Zzzcms
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 2Low 0
Watch
Add Zzzcms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-45554 | 9.8 | Oct 24 | File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via modification of the imageext parameter from jpg, jpeg,gif, and png to jpg,… Affected: 2.1.9 |
| CVE-2023-5263 | 8.8 | Sep 29 | ZZZCMS Database Backup File save.php restore permission Affected: 2.1.7 |
| CVE-2020-19682 | 8.8 | Dec 9 | A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save_user funciton in save.php Affected: 1.7.1 |
| CVE-2023-45555 | 7.8 | Oct 24 | File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via a crafted file to the down_url function in zzz.php file Affected: 2.1.9 |
| CVE-2023-5582 | 5.4 | Oct 14 | ZZZCMS Personal Profile Page cross site scripting Affected: 2.2.0 |
| CVE-2020-19683 | 5.4 | Dec 9 | A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php Affected: 1.7.1 |
Showing 6
