Vulnerabilities > Zzzcms > Zzzcms > 1.7.1

DATE CVE VULNERABILITY TITLE RISK
2021-12-09 CVE-2020-19682 Cross-Site Request Forgery (CSRF) vulnerability in Zzzcms 1.7.1
A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save_user funciton in save.php.
network
zzzcms CWE-352
6.8
2021-12-09 CVE-2020-19683 Cross-site Scripting vulnerability in Zzzcms 1.7.1
A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php.
network
zzzcms CWE-79
3.5