CVE-2020-23426

CVE-2020-23426 affects zzcms 201910, with an elevation of privilege in /user/adv.php that allows an attacker to modify data. Root cause is an access-control weakness enabling unauthorized data modification, enabling further attacks such as CSRF. Affected product/version: zzcms 201910; vulnerabili...

CVE-2020-23426

zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an attacker to modify data for further attacks such as CSRF...