Security Advisory

CVE-2023-34545

9.8
CRITICAL

Vulnerability Description

A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL.
Published Date August 9, 2023
Official Source NIST NVD Advisory