CVE-2021-43703

9.8 criticalEPSS 1.9%

Critical (9.8) in zzcms zzcms. EPSS 1.9% chance of exploitation in the next 30 days.

An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php. After disabling JavaScript, you can directly access the administrator console.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
Published: 2021-12-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zzcms:zzcms

References

https://github.com/forget-code/zzcms/issues/1
https://github.com/forget-code/zzcms/issues/1

Check your stack JSON