CVE-2019-9078

Published: 2019-02-24T17:29Z

Last Modified: 2024-11-21T04:50Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt