Skip to content
Sign in
5.3 Medium

CVE-2025-1949 A vulnerability, which was classified as problematic, has been found in ZZCMS 2025

Description

A vulnerability, which was classified as problematic, has been found in ZZCMS 2025. This issue affects some unknown processing of the file /3/ucenter_api/code/register_nodb.php of the component URL Handler. The manipulation of the argument $_SERVER['PHP_SELF'] leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products and versions

Product Affected versions Fixed in
ZZCMS 2025 No fix stated

Other CVEs of ZZCMS

The 15 CVEs of ZZCMS →
CVE-2025-14837 A vulnerability has been found in ZZCMS 2025 5.1 Medium CVE-2025-14836 A flaw has been found in ZZCMS 2025 5.1 Medium CVE-2025-13171 A vulnerability was identified in ZZCMS 2023 5.3 Medium CVE-2025-0565 A vulnerability was found in ZZCMS 2023 6.9 Medium
Track this CVE