CVE-2020-18717: Zzzcms Zzzphp

Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days.

SQL Injection in ZZZCMS zzzphp 1.7.1 allows remote attackers to execute arbitrary code due to a lack of parameter filtering in inc/zzz_template.php.

Affected products

• Zzzcms Zzzphp: version 1.7.1 only

Published 2021-02-05. Last modified 2026-06-17.