zcms project vulnerabilities

Products

• zcms 4

Latest zcms project CVEs

Newest publication first

1. CVE-2022-28522 ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=message&a=add.

   Published 2022-04-26

   Medium·CVSS 5.4 EPSS 0.61%

   ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=message&a=add.

2. CVE-2022-28521 ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.

   Published 2022-04-26

   Critical·CVSS 9.8 EPSS 1.6%

   ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.

3. CVE-2015-7347 Cross-site scripting (XSS) vulnerability in ZCMS JavaServer Pages Content Management System 1.1.

   Published 2017-09-20

   Medium·CVSS 4.8 EPSS 1.1%

   Cross-site scripting (XSS) vulnerability in ZCMS JavaServer Pages Content Management System 1.1.

4. CVE-2015-7346 SQL injection vulnerability in ZCMS 1.1.

   Published 2017-06-07

   Critical·CVSS 9.8 EPSS 3.7%

   SQL injection vulnerability in ZCMS 1.1.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.