CVE-2018-17413

XSS exists in zzcms v8.3 via the /uploadimgform.php noshuiyin parameter...

CVE-2018-17413

ZZCMS v8.3 is affected by a cross-site scripting (XSS) vulnerability in /uploadimg_form.php via the noshuiyin parameter. Root cause: unsanitized input leading to HTML/JS injection. Documented impact per sources: ability to inject scripts; CVSS3.0 base score 6.1 (MEDIUM) with user interaction requ...