CVE-2020-36136: Cskaza Cszcms

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendmail parameter in csz_model.php.

Affected products

• Cskaza Cszcms: version 1.2.9 only

Published 2023-08-11. Last modified 2026-06-17.