CVE-2021-3224

A stored cross-site scripting XSS vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter...

PT-2021-19679

Name of the Vulnerable Software and Affected Versions: cszcms version 1.2.9 Description: A stored cross-site scripting XSS issue exists in the /admin/pages/new "API Endpoint" via the content parameter. This allows for malicious script execution. Recommendations: For cszcms version 1.2.9, as a...

CVE-2021-3224: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter...

Exploit for SQL Injection in Cszcms Csz_Cms

CVEPOCtest Reproduction of the CVE-2019-13086 vulnerabilit...

Arbitrary File Deletion Vulnerability in cszcms-1.2.1

CSZCMS is an open source web application that allows to manage all the content and settings on a website. An arbitrary file deletion vulnerability exists in cszcms-1.2.1, which can be exploited by an attacker to delete arbitrary files on the server when deleting an avatar...