Cszcms: >> Csz Cms >> 1.2.4 Security Vulnerabilities
A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality. The vulnerability is located in the field parameter of the form viewing feature, allowing authenticated administrators to execute arbitrary SQL queries.
CVSS Score
5.4
EPSS Score
0.0
Published
2025-10-30
CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MY_Security.php.
CVSS Score
9.8
EPSS Score
0.005
Published
2021-10-27