zbzcms v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the neirong parameter at /php/ajax.php.

Published Apr 10, 2022 · Updated Aug 3, 2024 · Assigned by mitre