PT-2022-19062

Name of the Vulnerable Software and Affected Versions ZCMS version v20170206 Description A stored cross-site scripting XSS issue was found in ZCMS. The issue is exploited via the index.php endpoint with specific parameters: m=home, c=message, and a=add. This allows for malicious script execution...

CVE-2022-28522: Improper Neutralization of Input During Web Page Generation

ZCMS v20170206 was discovered to contain a stored cross-site scripting XSS vulnerability via index.php?m=home&c=message&a=add...

PT-2021-10393

Name of the Vulnerable Software and Affected Versions: thinkphp-zcms as of 20190715 Description: The issue allows SQL injection via the "index.php?m=home&c=message&a=add" API endpoint. This could potentially lead to unauthorized access to sensitive data. Recommendations: For thinkphp-zcms as of...

PT-2019-18972

Name of the Vulnerable Software and Affected Versions SchoolCMS version 2.3.1 Description An issue was discovered that allows for an XSS vulnerability. The vulnerability can be exploited via the index.php endpoint with specific parameters, including a=Index, c=Channel, m=Home, and id set to a...