CVE-2020-35973

An issue was discovered in zzcms2020. There is a XSS vulnerability that can insert and execute JS code arbitrarily via /user/manage.php. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt