CVE-2025-1949 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability, which was classified as problematic, has been found in ZZCMS 2025. This issue affects some unknown processing of the file /3/ucenter_api/code/r…
Medium CVSS: 5.3

CVE-2025-1949

A vulnerability, which was classified as problematic, has been found in ZZCMS 2025. This issue affects some unknown processing of the file /3/ucenter_api/code/register_nodb.php of the component URL Handler. The manipulation of the argument $_SERVER['PHP_SELF'] leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Vendor
Zzcms
Product
Zzcms
CWE
CWE-79
Yayın Tarihi
2025-03-04 19:15:37
Güncelleme
2025-04-23 15:00:45
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-79 Zzcms MEDIUM Zzcms 2025

Referanslar

https://github.com/Sinon2003/cve/blob/main/zzcms/xss-register_nodb.php.md https://vuldb.com/?ctiid.298541 https://vuldb.com/?id.298541 https://vuldb.com/?submit.508909 https://github.com/Sinon2003/cve/blob/main/zzcms/xss-register_nodb.php.md