| Package | Affected versions | Patched versions |
|---|---|---|
| zzcms | = 2019 |
zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free