iohex

1 exploit Active since Dec 2020
CVE-2020-20285 WRITEUP MEDIUM WRITEUP
zzcms 2019 - Stored Cross-Site Scripting via Referer Header in Login Page
There is a XSS in the user login page in zzcms 2019. Users can inject js code by the referer header via user/login.php
CVSS 5.4