NS-Sp4ce/ZZCMS-XSS

NS-Sp4ce/ZZCMS-XSS

Releases0
ZZCMS2019XSS

CVE History

CVEPublishedCVSS v3CVSS v2
3.5 LOW

zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT.