zzcms has 4 CVEs on record between 2021 and 2025. The median CVSS is 6.1 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.1
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2020-23630High· 8.8A blind SQL injection vulnerability exists in zzcms ver201910 based on time (cookie injection).49CVE-2020-19961High· 7.5A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the component subzs.php.42CVE-2025-14837Medium· 4.7A vulnerability has been found in ZZCMS 202526CVE-2025-14836Low· 2.7A flaw has been found in ZZCMS 202515
zzcms vulnerabilities
CVEs affecting zzcms, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2025-14837Medium· 4.7A vulnerability has been found in ZZCMS 2025
A vulnerability has been found in ZZCMS 2025. Affected by this issue is the function stripfxg of the file /admin/siteconfig.php of the component Backend Website Settings Module. Such manipulation of the argument icp leads to code injecti…
CVE-2025-14836Low· 2.7A flaw has been found in ZZCMS 2025
A flaw has been found in ZZCMS 2025. Affected by this vulnerability is an unknown functionality of the file /reg/user_save.php of the component User Data Storage Module. This manipulation causes cleartext storage in a file or on disk. Re…
CVE-2020-19961High· 7.5A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the component subzs.php.
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the component subzs.php.
CVE-2020-23630High· 8.8A blind SQL injection vulnerability exists in zzcms ver201910 based on time (cookie injection).
A blind SQL injection vulnerability exists in zzcms ver201910 based on time (cookie injection).