Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

cszcms CVEs

Beta · best-effort

30 CVEs tagged to vendor cszcms — 11 Critical, 3 High, 16 Medium, 0 Low, 0 Unrated.

See this archive with more filtersView vendor evidence profileExplore

CVE-2021-26776

Published Mar 11, 2021

CSZ CMS 1.2.9 is affected by a cross-site scripting (XSS) vulnerability in multiple pages through the field name.

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-3224

Published Mar 10, 2021

A stored cross-site scripting (XSS) vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter.

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2019-15524

Published Aug 26, 2019

CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management Module, which leads to remote code execution by visiting a p…

CVSS 9.8 · Critical
Vendor/product tagsBeta · best-effort

CVE-2019-13086

Published Jun 30, 2019

core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter.

CVSS 9.8 · Critical
Vendor/product tagsBeta · best-effort
Showing 26-30 of 30 CVEsPage 2 of 2