CVEs affecting projects tracked on Release Alert, from NVD & OSV.
A blind SQL injection vulnerability exists in zzcms ver201910 based on time (cookie injection).