Advisories · Technology

CSZCMS.

Every CVE that names CSZCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-58307 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

CSZCMS 1.3.0 Authenticated SQL Injection via Members View Endpoint
- CSZCMS
- SQL injection
Not analysed yet 11 Dec 2025
CVE-2023-6303 CVE record

CVSS 2.4 Low

CSZCMS Site Settings Page cross site scripting
- CSZCMS
- Cross-site scripting (XSS)
Not analysed yet 27 Nov 2023
CVE-2023-6302 CVE record

CVSS 4.7 Medium

CSZCMS File Manager Page templates permission
- CSZCMS
- Broken access control
- CWE-275
Not analysed yet 27 Nov 2023