CVE-2023-45554: Zzzcms

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via modification of the imageext parameter from jpg, jpeg,gif, and png to jpg, jpeg,gif, png, pphphp.

Affected products

• Zzzcms Zzzcms: version 2.1.9 only

Published 2023-10-25. Last modified 2026-06-17.