Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-35973
5.4
MEDIUMCVSS v3
Published
June 3, 2021
CVSS v2
3.5 LOW
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in zzcms2020. There is a XSS vulnerability that can insert and execute JS code arbitrarily via /user/manage.php.
forget-code/zzcms
GitHubzzcms,站长招商网cms,适用于招商代理型的行业网站,可用于医药招商网站程序源码,服装招商网站程序源码,化妆品招商网站的程序源码等。目前forget-code项目缓存了v7.0~2019的版本，官网最新版下载地址：http://www.zzcms.net/about/6.htm
GitHubzzcms,站长招商网cms,适用于招商代理型的行业网站,可用于医药招商网站程序源码,服装招商网站程序源码,化妆品招商网站的程序源码等。目前forget-code项目缓存了v7.0~2019的版本，官网最新版下载地址：http://www.zzcms.net/about/6.htm= 2020NVD