Vulnerabilidades de Zzcms
CVEs publicadas que afetam produtos de Zzcms: 3 registro(s), com severidade, exploração e correções.
CVE-2025-14837
Alta · 7.2
CWE-74 17/12/2025
ZZCMS Backend Website Settings siteconfig.php stripfxg code injection
A vulnerability has been found in ZZCMS 2025. Affected by this issue is the function stripfxg of the file /admin/siteconfig.php of the component Backend Website Settings Module. Such manipulation of the argument icp leads to code injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-14836
Baixa · 2.7
CWE-312 17/12/2025
ZZCMS User Data Storage user_save.php cleartext storage in file
A flaw has been found in ZZCMS 2025. Affected by this vulnerability is an unknown functionality of the file /reg/user_save.php of the component User Data Storage Module. This manipulation causes cleartext storage in a file or on disk. Remote exploitation of the attack is possible. The exploit has been published and may be used.
CVE-2025-13171
Alta · 8.8
CWE-89 14/11/2025
ZZCMS wangkan_list.php sql injection
A vulnerability was identified in ZZCMS 2023. This impacts an unknown function of the file /admin/wangkan_list.php. Such manipulation of the argument keyword leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.