Critical severity9.1NVD Advisory· Published Jul 30, 2021· Updated Jun 17, 2026
CVE-2021-37144
CVE-2021-37144
Description
CSZ CMS 1.2.9 is vulnerable to Arbitrary File Deletion. This occurs in PHP when the unlink() function is called and user input might affect portions of or the whole affected parameter, which represents the path of the file to remove, without sufficient sanitization.
Affected products
2- CSZ CMS/CSZ CMSdescription
Patches
Vulnerability mechanics
References
1- github.com/cskaza/cszcms/issues/32nvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.