CVE-2022-28521: Zcms Project Zcms

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.

Affected products

• Zcms Project Zcms: version 20170206 only

Published 2022-04-26. Last modified 2026-06-17.