Vulnerabilities

TI-2022-11212 CVE-2022-28522 · GHSA-x7mq-4mr7-gj5c

ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS)…

LOW 25

ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=message&a=add.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00608 Published 2022-04-26 No fix listed CWE-79

TI-2022-11211 CVE-2022-28521 · GHSA-vx7h-vmc2-6wp8

MEDIUM 45

ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01618 Published 2022-04-26 No fix listed

TI-2015-06110 CVE-2015-7347 · GHSA-qf2v-c5vj-73xg

LOW 24

Cross-site scripting (XSS) vulnerability in ZCMS JavaServer Pages Content Management System 1.1.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.01107 Published 2017-09-20 No fix listed CWE-79

TI-2015-06109 CVE-2015-7346 · GHSA-c6xh-2qmr-c6xc

MEDIUM 48

SQL injection vulnerability in ZCMS 1.1.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.037 Published 2017-06-07 No fix listed CWE-89