How many CVEs does zzcms have?

zzcms has 107 published CVE records since 2018, including 6 in the last two years.

How many zzcms CVEs are in CISA KEV?

None of zzcms's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which zzcms products have the most CVEs?

The zzcms products with the most published CVEs are zzcms, zzmcms.

What are the most common weakness types in zzcms CVEs?

zzcms's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-94 (Improper Control of Generation of Code ('Code Injection')).

Are there public exploits for zzcms vulnerabilities?

Yes — 106 of zzcms's CVEs have a known public exploit.

How many critical zzcms vulnerabilities are there?

zzcms has 30 critical and 41 high-severity CVEs.

What is the average severity of zzcms CVEs?

The average CVSS base score across zzcms's scored CVEs is 7.6.

RadicalNotion.AI

Log in Create an account

107 CVEs

zzcms Vulnerabilities

Name: zzcms vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for zzcms.

107

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

106

Public exploits

PoC or exploit code

7.6

Avg CVSS

2018–2025

Overview

zzcms has 107 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 106 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

Security scorecard

A quick read on zzcms's vulnerability posture, as a share of its 107 published CVEs.

Average CVSS: 7.6
Critical / high: 66%
Actively exploited (KEV): 0%
Public exploit available: 99%
Patch available: 0%

Severity and exploitation

How the CVSS severity of zzcms's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical30

High41

Medium36

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of zzcms's CVEs are currently listed in CISA's KEV catalog.

Public exploits

106

106 of zzcms's CVEs have a known public exploit available.

Most affected products

The zzcms products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in zzcms CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish zzcms CVE records.

Disclosure activity by year

How many zzcms CVEs were published each year.

2018

27

2019

13

2020

1

2021

17

2022

20

2023

3

2024

20

2025

6

Latest zzcms CVEs

The most recently disclosed vulnerabilities affecting zzcms.

ZZCMS Backend Website Settings siteconfig.php stripfxg code injection
CWE-74
Medium · CVSS 5.1
EPSS 0.5%2025-12-17
ZZCMS User Data Storage user_save.php cleartext storage in file
CWE-313
Medium · CVSS 5.1
EPSS 0.2%2025-12-17
ZZCMS wangkan_list.php sql injection
CWE-89
Medium · CVSS 5.3
EPSS 0.4%2025-11-14
ZZCMS URL register_nodb.php cross site scripting
CWE-79
Medium · CVSS 5.3
EPSS 0.5%2025-03-04
Critical vulnerability · 2025-01-31
CWE-89
Critical · CVSS 9.8
EPSS 0.5%2025-01-31
ZZCMS index.php sql injection
CWE-89
Medium · CVSS 6.9
EPSS 1.4%2025-01-19
Critical vulnerability · 2024-12-02
CWE-89
Critical · CVSS 9.8
EPSS 0.6%2024-12-02
Medium vulnerability · 2024-11-15
CWE-74
Medium · CVSS 5.1
EPSS 0.6%2024-11-15
Medium vulnerability · 2024-11-12
CWE-94
Medium · CVSS 5.1
EPSS 0.3%2024-11-12
Medium vulnerability · 2024-10-23
CWE-434
Medium · CVSS 5.3
EPSS 0.5%2024-10-23
Medium vulnerability · 2024-10-23
CWE-434
Medium · CVSS 5.3
EPSS 0.5%2024-10-23
ZZCMS phome.php Ebak_DotranExecutSQL sql injection
CWE-89
Medium · CVSS 5.3
EPSS 0.5%2024-10-23

Get an alert for each new zzcms CVE, with AI-written analysis and remediation steps.

Monitor zzcms CVEs

Other vendors

CVE counts for other vendors.

Veeam108 CVEs emlog108 CVEs libav108 CVEs smub108 CVEs Mikrotik107 CVEs Bitdefender107 CVEs clamav106 CVEs TryGhost106 CVEs

Browse all vendors

Frequently asked questions

Common questions about zzcms vulnerabilities.

How many CVEs does zzcms have?: zzcms has 107 published CVE records since 2018, including 6 in the last two years.
How many zzcms CVEs are in CISA KEV?: None of zzcms's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which zzcms products have the most CVEs?: The zzcms products with the most published CVEs are zzcms, zzmcms.
What are the most common weakness types in zzcms CVEs?: zzcms's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-94 (Improper Control of Generation of Code ('Code Injection')).
Are there public exploits for zzcms vulnerabilities?: Yes — 106 of zzcms's CVEs have a known public exploit.
How many critical zzcms vulnerabilities are there?: zzcms has 30 critical and 41 high-severity CVEs.
What is the average severity of zzcms CVEs?: The average CVSS base score across zzcms's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track zzcms vulnerabilities

Get an alert for each new zzcms CVE, with AI-written analysis and remediation steps.

Create an account See pricing