CVE

CVE-2020-20285

5.4

CVSS

Description

There is a XSS in the user login page in zzcms 2019. Users can inject js code by the referer header via user/login.php

Attack Vector

Privileges Req.

User Interaction

Updated Sep 28, 2026View on NVD →

S4E scanner

CVE-2020-20285 Scanner

CVE-2020-20285 scanner - Cross-Site Scripting (XSS) vulnerability in ZZcms

Used 2.5k times · 3.3k assets checked · domain, ipv4, subdomain

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.