| Package | Affected versions | Patched versions |
|---|---|---|
| csz cms | ≤ 1.3.0 |
A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality. The vulnerability is located in the field parameter of the form viewing feature, allowing authenticated administrators to execute arbitrary SQL queries.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free