PatchTheCVEzzzcms vulnerabilities and fixes
Recent CVEs affecting zzzcms, with upgrade or downgrade steps. 6 tracked.
zzzcms has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-10-25. Highest priority: CVE-2023-45554 (score 64/100).
- CVE-2023-5582 LOW 3.5 DOWNGRADE A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0
- CVE-2023-5263 MEDIUM 6.3 DOWNGRADE A vulnerability was found in ZZZCMS 2.1.7 and classified as critical
- CVE-2023-45555 HIGH 7.8 DOWNGRADE File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via a crafted f
- CVE-2023-45554 CRITICAL 9.8 DOWNGRADE File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via modificatio
- CVE-2020-19683 MEDIUM 5.4 DOWNGRADE A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php.
- CVE-2020-19682 HIGH 8.8 DOWNGRADE A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save_user funciton in save.ph
FAQ
How do I fix zzzcms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zzzcms being exploited right now?
None of the tracked zzzcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zzzcms CVE should I patch first?
CVE-2023-45554 currently ranks highest (64/100): File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via modificatio.