CVE-2020-35973: Zzcms

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in zzcms2020. There is a XSS vulnerability that can insert and execute JS code arbitrarily via /user/manage.php.

Affected products

• Zzcms Zzcms: version 2020 only

Published 2021-06-03. Last modified 2026-06-17.