Skip to content
OpenAdvisories

Vendor

Cszcms

3 known vulnerabilities.

Products

CSZ CMS 2 CSZCMS 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2021-47737

    CSZ CMS 1.2.7 HTML Injection Vulnerability via Member Dashboard

    CSZ CMS 1.2.7 contains an HTML injection vulnerability that allows authenticated users to insert malicious hyperlinks in message titles. Attackers can craft POST requests to the member messaging system with HTML-based links to potentially conduct phishing or …

    Cszcms CSZ CMS
  • Medium 5.4
    CVE-2021-47738

    CSZ CMS 1.2.7 Persistent Cross-Site Scripting via Private Messaging

    CSZ CMS 1.2.7 contains a persistent cross-site scripting vulnerability that allows unauthorized users to embed malicious JavaScript in private messages. Attackers can send messages with script payloads in the user-agent header, which will execute when an admi…

    Cszcms CSZ CMS