Medium severity5.4NVD Advisory· Published Dec 23, 2025· Updated Jun 17, 2026

CVE-2021-47737

Description

CSZ CMS 1.2.7 contains an HTML injection vulnerability that allows authenticated users to insert malicious hyperlinks in message titles. Attackers can craft POST requests to the member messaging system with HTML-based links to potentially conduct phishing or social engineering attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

CSZ CMS/cszcmsllm-fuzzy3 versions
<1.2.7+ 2 more
- (no CPE)range: <1.2.7
- cpe:2.3:a:cszcms:csz_cms:1.2.7:*:*:*:*:*:*:*
- (no CPE)range: 1.2.7

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/48357nvdExploitThird Party AdvisoryVDB Entry
www.vulncheck.com/advisories/csz-cms-html-injection-vulnerability-via-member-dashboardnvdThird Party Advisory
sourceforge.net/projects/cszcms/nvdProduct
www.cszcms.comnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000