CVE-2023-41601

MEDIUM 6.1CVE-2023-41601 · Published 06/09/2023 · updated 17/06/2026

In short

CVE-2023-41601 is a MEDIUM (CVSS 6.1) vulnerability affecting csz cms (cszcms).
Chance of exploitation in the next 30 days (EPSS): 0.44%, higher than 38.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
csz cms cszcms	`= 1.3.0`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in install/index.php of CSZ CMS v1.3.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Database Username or Database Host parameters.

References

al3zx/csz_cms_1_3_0_xss_in_install_page · Exploit
cszcms.com · Product

More vulnerabilities in csz cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

csz cms

cszcms

= 1.3.0

No fix yet

More vulnerabilities in csz cms

See all →