Description
zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT.
Unscored
CVE-2019-9078
EUVD-2019-18464GHSA-g2w8-vghw-669g
zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as s…
Published Feb 24, 2019 · Updated Aug 4, 2024 · Assigned by mitre