Skip to content
Cszcms Csz Cms vulnerabilities
-
cszcms csz cms
CSZ CMS 1.2.7 HTML Injection Vulnerability via Member Dashboard
CVE-2021-47737
5.1 Medium
-
cszcms csz cms
CSZ CMS 1.2.7 Persistent Cross-Site Scripting via Private Messaging
CVE-2021-47738
5.1 Medium
-
cszcms, cszcms csz cms +1 more
CSZCMS 1.3.0 Authenticated SQL Injection via Members View Endpoint
CVE-2024-58307
9.3 Critical
-
cszcms csz cms
A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality....
CVE-2025-63608
5.4 Medium
-
cszcms csz cms
SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code...
CVE-2025-29084
6.5 Medium
-
cszcms csz cms
SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code...
CVE-2025-29083
6.5 Medium
-
cszcms csz cms
Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows a remote attacker to execute...
CVE-2024-27752
5.4 Medium
-
cszcms csz cms, cszcms +1 more
A Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows an attacker to execute arbitrary...
CVE-2024-27734
6.1 Medium
-
cszcms csz cms, cszcms +1 more
An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to...
CVE-2024-25414
9.8 Critical
-
cszcms csz cms
Multiple cross-site scripting (XSS) vulnerabilities in install/index.php of CSZ CMS v1.3.0 allow...
CVE-2023-41601
6.1 Medium
-
cszcms csz cms
Cross-Site Scripting (XSS) vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary...
CVE-2023-39599
5.4 Medium
-
cszcms csz cms
A Cross-Site Scripting (XSS) vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary...
CVE-2023-38911
5.4 Medium
-
cszcms csz cms
CSZ CMS 1.3.0 is vulnerable to cross-site scripting (XSS), which allows attackers to execute...
CVE-2023-38910
6.1 Medium
-
cszcms csz cms
File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute...
CVE-2020-19786
8.8 High
-
cszcms csz cms
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Plugin_manager_setstatus
CVE-2022-27165
9.8 Critical
-
cszcms csz cms
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_viewUsers
CVE-2022-27164
9.8 Critical
-
cszcms csz cms
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_editUser
CVE-2022-27163
9.8 Critical
-
cszcms csz cms
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_editUser
CVE-2022-27162
9.8 Critical
-
cszcms csz cms
Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_viewUsers
CVE-2022-27161
9.8 Critical
-
cszcms csz cms
CSZ CMS 1.2.9 has a Time and Boolean-based Blind SQL Injection vulnerability in the endpoint ...
CVE-2021-43701
Public exploit
6.5 Medium
-
cszcms csz cms
CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component ...
CVE-2020-21250
9.8 Critical
-
cszcms csz cms
CSZ CMS 1.2.9 is vulnerable to Arbitrary File Deletion. This occurs in PHP when the unlink()...
CVE-2021-37144
9.1 Critical
-
cszcms csz cms
A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web...
CVE-2020-25391
5.4 Medium
-
cszcms csz cms
A cross site scripting (XSS) vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary...
CVE-2020-25392
5.4 Medium
-
cszcms csz cms
CSZ CMS 1.2.9 is affected by a cross-site scripting (XSS) vulnerability in multiple pages through...
CVE-2021-26776
5.4 Medium
-
cszcms csz cms
A stored cross-site scripting (XSS) vulnerability in cszcms 1.2.9 exists in /admin/pages/new via...
CVE-2021-3224
5.4 Medium
-
cszcms csz cms
CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager...
CVE-2019-15524
9.8 Critical
-
cszcms csz cms
core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by...
CVE-2019-13086
Public exploit
EPSS 32.0%
9.8 Critical
-
cszcms csz cms
CSZ CMS 1.1.8 has CSRF via admin/users/new/add.
CVE-2019-7566
8.8 High