← All advisories

Critical severity9.8NVD Advisory· Published Oct 27, 2021· Updated Jun 17, 2026

CVE-2020-21250

CVE-2020-21250

Description

CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MY_Security.php.

Affected products

3

CSZ CMS/cszcms2 versions
cpe:2.3:a:cszcms:csz_cms:1.2.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cszcms:csz_cms:1.2.4:*:*:*:*:*:*:*
- (no CPE)range: <=1.2.4
CSZ/CSZ CMSdescription

Patches

Vulnerability mechanics

References

1

github.com/cskaza/cszcms/issues/22nvdExploitIssue TrackingPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.