CVE-2021-43703: Zzcms

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php. After disabling JavaScript, you can directly access the administrator console.

Affected products

• Zzcms Zzcms: up to and including 2019

Published 2021-12-09. Last modified 2026-06-17.