PT-2022-19062

Name of the Vulnerable Software and Affected Versions ZCMS version v20170206 Description A stored cross-site scripting XSS issue was found in ZCMS. The issue is exploited via the index.php endpoint with specific parameters: m=home, c=message, and a=add. This allows for malicious script execution...

CVE-2022-28522: Improper Neutralization of Input During Web Page Generation

ZCMS v20170206 was discovered to contain a stored cross-site scripting XSS vulnerability via index.php?m=home&c=message&a=add...

PT-2021-10393

Name of the Vulnerable Software and Affected Versions: thinkphp-zcms as of 20190715 Description: The issue allows SQL injection via the "index.php?m=home&c=message&a=add" API endpoint. This could potentially lead to unauthorized access to sensitive data. Recommendations: For thinkphp-zcms as of...