← Database

CVE-2024-43005

MEDIUM CVSS: 4.7 Published: 2024-08-16 Modified: 2026-06-17

Description

A reflected cross-site scripting (XSS) vulnerability in the component dl_liuyan_save.php of ZZCMS v2023 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.

Affected Platforms

Zzcms Zzcms

Weakness Type

CWE-79

References