CVE-2024-11242: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/adlist.php?action=pass of the component Keyword Filtering. The manipulation of the argument keyword leads to sql injection. The attack may be launched...

CVE-2022-44361

An issue was discovered in ZZCMS 2022. There is a cross-site scripting XSS vulnerability in admin/adlist.php...

Cross site scripting

An issue was discovered in ZZCMS 2022. There is a cross-site scripting XSS vulnerability in admin/adlist.php...

CVE-2022-44361

CVE-2022-44361 affects ZZCMS 2022, fixed in admin/ad_list.php XSS. Root cause: insufficient input sanitization in the admin/ad_list.php component leading to cross-site scripting. CVSSv3.1 base score 5.4 (Network, Low attack complexity, User interaction required, Privileges Low, Confidentiality/In...

CVE-2022-44361: Improper Neutralization of Input During Web Page Generation

An issue was discovered in ZZCMS 2022. There is a cross-site scripting XSS vulnerability in admin/adlist.php...