Cszcms vulnerabilities

Products

• Csz Cms 29
• Cszcms 6
• Csz Cms 3

Newest

• csz cms cms, cszcms csz cms +1 more CSZ CMS CSZ CMS - Broken Access Control CVE-2026-72601 7.5 HighAugust 11, 2026
• cszcms csz cms CSZ CMS 1.2.7 HTML Injection Vulnerability via Member Dashboard CVE-2021-47737 5.1 MediumDecember 23, 2025
• cszcms csz cms CSZ CMS 1.2.7 Persistent Cross-Site Scripting via Private Messaging CVE-2021-47738 5.1 MediumDecember 23, 2025
• cszcms, cszcms csz cms +1 more CSZCMS 1.3.0 Authenticated SQL Injection via Members View Endpoint CVE-2024-58307 9.3 CriticalDecember 11, 2025
• cszcms csz cms A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality.... CVE-2025-63608 5.4 MediumOctober 30, 2025
• cszcms csz cms SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code... CVE-2025-29084 6.5 MediumSeptember 23, 2025
• cszcms csz cms SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code... CVE-2025-29083 6.5 MediumSeptember 23, 2025
• cszcms csz cms Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows a remote attacker to execute... CVE-2024-27752 5.4 MediumApril 19, 2024
• cszcms csz cms, cszcms +1 more A Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows an attacker to execute arbitrary... CVE-2024-27734 6.1 MediumMarch 1, 2024
• cszcms csz cms, cszcms +1 more An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to... CVE-2024-25414 9.8 CriticalFebruary 16, 2024
• cskaza cszcms CSZCMS Site Settings Page cross site scripting CVE-2023-6303 2.4 LowNovember 27, 2023
• cskaza cszcms CSZCMS File Manager Page templates permission CVE-2023-6302 4.7 MediumNovember 27, 2023
• cszcms csz cms Multiple cross-site scripting (XSS) vulnerabilities in install/index.php of CSZ CMS v1.3.0 allow... CVE-2023-41601 6.1 MediumSeptember 6, 2023
• cszcms csz cms Cross-Site Scripting (XSS) vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary... CVE-2023-39599 5.4 MediumAugust 22, 2023
• cszcms csz cms A Cross-Site Scripting (XSS) vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary... CVE-2023-38911 5.4 MediumAugust 18, 2023
• cszcms csz cms CSZ CMS 1.3.0 is vulnerable to cross-site scripting (XSS), which allows attackers to execute... CVE-2023-38910 6.1 MediumAugust 18, 2023
• cszcms csz cms File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute... CVE-2020-19786 8.8 HighMarch 23, 2023
• cszcms CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can be... CVE-2022-28997 7.5 HighMay 23, 2022
• cszcms csz cms CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Plugin_manager_setstatus CVE-2022-27165 9.8 CriticalApril 12, 2022
• cszcms csz cms CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_viewUsers CVE-2022-27164 9.8 CriticalApril 12, 2022
• cszcms csz cms CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_editUser CVE-2022-27163 9.8 CriticalApril 12, 2022
• cszcms csz cms CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_editUser CVE-2022-27162 9.8 CriticalApril 12, 2022
• cszcms csz cms Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_viewUsers CVE-2022-27161 9.8 CriticalApril 12, 2022
• cszcms csz cms CSZ CMS 1.2.9 has a Time and Boolean-based Blind SQL Injection vulnerability in the endpoint ... CVE-2021-43701 Public exploit 6.5 MediumMarch 29, 2022
• cszcms csz cms CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component ... CVE-2020-21250 9.8 CriticalOctober 27, 2021
• cszcms csz cms CSZ CMS 1.2.9 is vulnerable to Arbitrary File Deletion. This occurs in PHP when the unlink()... CVE-2021-37144 9.1 CriticalJuly 29, 2021
• cszcms csz cms A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web... CVE-2020-25391 5.4 MediumJuly 9, 2021
• cszcms csz cms A cross site scripting (XSS) vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary... CVE-2020-25392 5.4 MediumJuly 9, 2021
• cszcms csz cms CSZ CMS 1.2.9 is affected by a cross-site scripting (XSS) vulnerability in multiple pages through... CVE-2021-26776 5.4 MediumMarch 11, 2021
• cszcms csz cms A stored cross-site scripting (XSS) vulnerability in cszcms 1.2.9 exists in /admin/pages/new via... CVE-2021-3224 5.4 MediumMarch 10, 2021
• cszcms csz cms CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager... CVE-2019-15524 9.8 CriticalAugust 26, 2019
• cszcms csz cms core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by... CVE-2019-13086 Public exploit EPSS 32.0% 9.8 CriticalJune 30, 2019
• cszcms csz cms CSZ CMS 1.1.8 has CSRF via admin/users/new/add. CVE-2019-7566 8.8 HighFebruary 7, 2019