Zcms Project Zcms
4 CVEs affecting Zcms Project Zcms. Latest disclosed: 2022-04-26. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-28521 | Critical | 9.8 | 2022-04-26 | ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config. |
CVE-2015-7346 | Critical | 9.8 | 2017-06-07 | SQL injection vulnerability in ZCMS 1.1. |
CVE-2022-28522 | Medium | 5.4 | 2022-04-26 | ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=message&a=add. |
CVE-2015-7347 | Medium | 4.8 | 2017-09-20 | Cross-site scripting (XSS) vulnerability in ZCMS JavaServer Pages Content Management System 1.1. |