Cszcms vulnerabilities
We track 4 vulnerabilities in Cszcms products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on December 11, 2025.
Latest Cszcms vulnerabilities
- 8.8 High severity
CSZCMS: Improper Neutralization of Special Elements used in an SQL Command
CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute t
- 9.8 Critical severity
cszcms: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to execute arbitrary code via uploading a crafted Zip file.
- 7.2 High severity
A vulnerability was found in CSZCMS 1.3.0 and classified as critical.
A vulnerability was found in CSZCMS 1.3.0 and classified as critical. Affected by this issue is some unknown functionality of the file \views\templates of the component File Manager Page. The manipulation leads to permission issues. The attack may be launched
- 7.5 High severity
Cszcms: Server-Side Request Forgery
CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/.