Sploitus

33 exploited vulnerabilities in Csz Cms

Vulnerabilities with publicly known exploits

Vendors
Csz Cms, Csz, Php, Cskaza, Unknown, Photo Url
With known exploits
33
Affected Cszcms Csz Cms versions
≤ 1.2.2, 1.2.9, 1.3.0

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2024-25414
CVSS 9.8 CRITICAL 2024-02-15
CVE-2022-27165
CVSS 9.8 CRITICAL 2022-04-12FIX AVAILABLE
CVE-2022-27164
CVSS 9.8 CRITICAL 2022-04-12
CVE-2022-27163
CVSS 9.8 CRITICAL 2022-04-12
CVE-2022-27162
CVSS 9.8 CRITICAL 2022-04-12
CVE-2022-27161
CVSS 9.8 CRITICAL 2022-04-12
CVE-2021-46377
CVSS 9.8 CRITICAL 2022-01-27
CVE-2020-21250
CVSS 9.8 CRITICAL 2021-10-27
CVE-2019-13086 1 exploit
CVSS 9.8 CRITICAL 2019-06-30
Exploit for SQL Injection in Cszcms Csz_Cms
CVE-2024-58307
CVSS 9.3 CRITICAL 2025-12-11FIX AVAILABLE
CVE-2021-37144
CVSS 9.1 CRITICAL 2021-07-20
CVE-2019-7566
CVSS 8.8 HIGH 2019-02-07FIX AVAILABLE
CVE-2020-36136
CVSS 7.5 HIGH 2023-08-11FIX AVAILABLE
CVE-2022-28997
CVSS 7.5 HIGH 2022-05-23
CVE-2023-6302
CVSS 7.2 HIGH 2023-11-27
CVE-2025-29084
CVSS 6.5 MEDIUM 2025-09-23
CVE-2025-29083
CVSS 6.5 MEDIUM 2025-09-23FIX AVAILABLE
CVE-2021-43701 3 exploits
CVSS 6.5 MEDIUM 2022-03-29FIX AVAILABLE
CSZ CMS 1.2.9 - Multiple Blind SQL injection (Authenticated) VulnerabilityCSZ CMS 1.2.9 - 'Multiple' Blind SQLi(Authenticated)
CVE-2024-27734
CVSS 6.1 MEDIUM 2024-03-01
CVE-2023-41601
CVSS 6.1 MEDIUM 2023-09-06
CVE-2023-38910 3 exploits
CVSS 6.1 MEDIUM 2023-08-18FIX AVAILABLE
CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Photo URL and YouTube URL) VulnerabilityCSZ CMS 1.3.0 - Stored Cross-Site Scripting ('Photo URL' and 'YouTube URL' )
CVE-2021-47738
CVSS 5.4 MEDIUM 2025-12-23FIX AVAILABLE
CVE-2021-47737
CVSS 5.4 MEDIUM 2025-12-23FIX AVAILABLE
CVE-2025-63608
CVSS 5.4 MEDIUM 2025-10-30FIX AVAILABLE
CVE-2024-27752
CVSS 5.4 MEDIUM 2024-04-19FIX AVAILABLE
CVE-2023-41436
CVSS 5.4 MEDIUM 2023-09-15
CVE-2023-39599
CVSS 5.4 MEDIUM 2023-08-22
CVE-2023-38911 3 exploits
CVSS 5.4 MEDIUM 2023-08-18
CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin Gallery) VulnerabilityCSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery')
CVE-2021-3224
CVSS 5.4 MEDIUM 2021-03-10FIX AVAILABLE
CVE-2021-26776
CVSS 5.4 MEDIUM 2021-03-11
CVE-2020-25392
CVSS 5.4 MEDIUM 2021-07-09FIX AVAILABLE
CVE-2020-25391
CVSS 5.4 MEDIUM 2021-07-09
CVE-2023-6303
CVSS 4.8 MEDIUM 2023-11-27