CVE-2021-46377

There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.php#viewUser

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-01-27

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Cszcms (Cskaza)

References

• https://github.com/cskaza/cszcms/issues/33