CVE-2019-16722: Zzzcms Zzzphp

Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days.

ZZZCMS zzzphp v1.7.2 has an insufficient protection mechanism against PHP Code Execution, because passthru bypasses an str_ireplace operation.

Affected products

• Zzzcms Zzzphp: version 1.7.2 only

Published 2019-09-23. Last modified 2026-06-17.