ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=.

Published Sep 22, 2022 · Updated May 27, 2025 · Assigned by mitre