CVE-2025-22957: Zzcms

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A SQL injection vulnerability exists in the front-end of the website in ZZCMS <= 2023, which can be exploited without any authentication. This vulnerability could potentially allow attackers to gain unauthorized access to the database and extract sensitive information.

Affected products

• Zzcms Zzcms: up to and including 2023

Published 2025-01-31. Last modified 2026-06-17.