Zcms

zcms

Vendor: Zcms Project • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-28522 1Zcms Project 1Zcms Jun 17, 2026 Apr 26, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=message&a=add.
CVE-2022-28521 1Zcms Project 1Zcms Jun 17, 2026 Apr 26, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.
CVE-2015-7347 1Zcms Project 1Zcms May 13, 2026 Sep 20, 2017 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in ZCMS JavaServer Pages Content Management System 1.1.
CVE-2015-7346 1Zcms Project 1Zcms May 13, 2026 Jun 7, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL injection vulnerability in ZCMS 1.1.