How many CVEs does zzcms have?

zzcms has 107 published CVE records since 2018, including 6 in the last two years.

How many zzcms CVEs are in CISA KEV?

None of zzcms's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which zzcms products have the most CVEs?

The zzcms products with the most published CVEs are zzcms, zzmcms.

What are the most common weakness types in zzcms CVEs?

zzcms's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).

Are there public exploits for zzcms vulnerabilities?

Yes — 25 of zzcms's CVEs have a known public exploit.

How many critical zzcms vulnerabilities are there?

zzcms has 30 critical and 41 high-severity CVEs.

What is the average severity of zzcms CVEs?

The average CVSS base score across zzcms's scored CVEs is 7.6.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

107 CVEs

zzcms Vulnerabilities

Name: zzcms vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for zzcms.

107

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

25

Public exploits

PoC or exploit code

7.6

Avg CVSS

2018–2025

Overview

zzcms has 107 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 25 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting zzcms products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on zzcms's vulnerability posture, as a share of its 107 published CVEs.

Average CVSS: 7.6
Critical / high: 66%
Actively exploited (KEV): 0%
Public exploit available: 23%
Patch available: 6%

Severity and exploitation

How the CVSS severity of zzcms's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical30

High41

Medium36

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of zzcms's CVEs are currently listed in CISA's KEV catalog.

Public exploits

25

25 of zzcms's CVEs have a known public exploit available.

Most affected products

The zzcms products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in zzcms CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish zzcms CVE records.

Disclosure activity by year

How many zzcms CVEs were published each year.

2018

27

2019

13

2020

1

2021

17

2022

20

2023

3

2024

20

2025

6

Latest zzcms CVEs

The most recently disclosed vulnerabilities affecting zzcms.

ZZCMS Backend Website Settings siteconfig.php stripfxg code injection
CWE-74
Medium · CVSS 5.1
EPSS 0.4%2025-12-17
ZZCMS User Data Storage user_save.php cleartext storage in file
CWE-313
Medium · CVSS 5.1
EPSS 0.2%2025-12-17
ZZCMS wangkan_list.php sql injection
CWE-89
Medium · CVSS 5.3
EPSS 0.3%2025-11-14
ZZCMS URL register_nodb.php cross site scripting
CWE-79
Medium · CVSS 5.3
EPSS 0.5%2025-03-04
Critical vulnerability · 2025-01-31
CWE-89
Critical · CVSS 9.8
EPSS 0.5%2025-01-31
ZZCMS index.php sql injection
CWE-89
Medium · CVSS 6.9
EPSS 1.4%2025-01-19
Critical vulnerability · 2024-12-02
CWE-89
Critical · CVSS 9.8
EPSS 0.6%2024-12-02
Medium vulnerability · 2024-11-15
CWE-74
Medium · CVSS 5.1
EPSS 0.5%2024-11-15
Medium vulnerability · 2024-11-12
CWE-94
Medium · CVSS 5.1
EPSS 0.3%2024-11-12
Medium vulnerability · 2024-10-23
CWE-434
Medium · CVSS 5.3
EPSS 0.5%2024-10-23
Medium vulnerability · 2024-10-23
CWE-434
Medium · CVSS 5.3
EPSS 0.5%2024-10-23
ZZCMS phome.php Ebak_DotranExecutSQL sql injection
CWE-89
Medium · CVSS 5.3
EPSS 0.5%2024-10-23

Track new zzcms CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor zzcms CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

Tor109 CVEs ipswitch109 CVEs portabilis109 CVEs libav108 CVEs Bitdefender107 CVEs NLnet Labs107 CVEs parseplatform107 CVEs clamav106 CVEs

Browse all vendors

Frequently asked questions

Common questions about zzcms vulnerabilities.

How many CVEs does zzcms have?: zzcms has 107 published CVE records since 2018, including 6 in the last two years.
How many zzcms CVEs are in CISA KEV?: None of zzcms's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which zzcms products have the most CVEs?: The zzcms products with the most published CVEs are zzcms, zzmcms.
What are the most common weakness types in zzcms CVEs?: zzcms's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
Are there public exploits for zzcms vulnerabilities?: Yes — 25 of zzcms's CVEs have a known public exploit.
How many critical zzcms vulnerabilities are there?: zzcms has 30 critical and 41 high-severity CVEs.
What is the average severity of zzcms CVEs?: The average CVSS base score across zzcms's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track zzcms vulnerabilities

Monitor new zzcms vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing