CVE-2019-9078

zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT.

Date published : 2019-02-24

https://github.com/NS-Sp4ce/ZZCMS-XSS/blob/master/xss.md