A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save_user funciton in save.php.
CVSS Score
8.8
EPSS Score
0.001
Published
2021-12-09
A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php.
CVSS Score
5.4
EPSS Score
0.002
Published
2021-12-09