CSZ CMS 1.2.9
Approved changes feed: RSS · Atom
cpe:2.3:a:cszcms:csz_cms:1.2.9:*:*:*:*:*:*:*
part: a version: 1.2.9 update: *
| Vendor | Cszcms (8ad51d47-ebd1-57b7-9393-48e43805ff6d) |
|---|---|
| Product | Csz Cms (84ba435b-7100-507c-97dd-1a0439326813) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/cskaza/cszcms |
purl2cpe | 2026-06-01 10:16:10.889444 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-43701 |
vulnerable | 2026-06-08 05:36:43.730261 |
Details available
CSZ CMS 1.2.9 has a Time and Boolean-based Blind SQL Injection vulnerability in the endpoint /admin/export/getcsv/article_db, via the fieldS[] and orderby parameters.
Published: 2022-03-29T15:31:16.000Z
Updated: 2024-08-04T04:03:08.648Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3224 |
vulnerable | 2026-06-08 05:33:51.032193 |
Details available
A stored cross-site scripting (XSS) vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter.
Published: 2021-03-10T13:38:23.000Z
Updated: 2024-08-03T16:53:16.390Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37144 |
vulnerable | 2026-06-08 05:32:53.426414 |
Details available
CSZ CMS 1.2.9 is vulnerable to Arbitrary File Deletion. This occurs in PHP when the unlink() function is called and user input might affect portions of or the whole affected parameter, which represents the path of the file to remove, without sufficient sanitization.
Published: 2021-07-29T17:25:02.000Z
Updated: 2024-08-04T01:16:03.094Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26776 |
vulnerable | 2026-06-08 05:30:45.218969 |
Details available
CSZ CMS 1.2.9 is affected by a cross-site scripting (XSS) vulnerability in multiple pages through the field name.
Published: 2021-03-11T16:22:51.000Z
Updated: 2024-08-03T20:33:41.220Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25392 |
vulnerable | 2026-06-08 05:22:36.709922 |
Details available
A cross site scripting (XSS) vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Article' field under the 'Article' plugin.
Published: 2021-07-09T21:56:07.000Z
Updated: 2024-08-04T15:33:05.532Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25391 |
vulnerable | 2026-06-08 05:22:36.709424 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.