CVE-2020-28102: Chshcms Cscms

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

cscms v4.1 allows for SQL injection via the "js_del" function.

Affected products

• Chshcms Cscms: version 4.1 only

Published 2022-01-11. Last modified 2026-06-17.