CVE-2023-45555: Zzzcms

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via a crafted file to the down_url function in zzz.php file.

Affected products

• Zzzcms Zzzcms: version 2.1.9 only

Published 2023-10-25. Last modified 2026-06-17.