VULNERABILITY INTELLIGENCE

CVE-2021-47737

CVSS score5.4 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2025-12-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

CSZ CMS 1.2.7 contains an HTML injection vulnerability that allows authenticated users to insert malicious hyperlinks in message titles. Attackers can craft POST requests to the member messaging system with HTML-based links to potentially conduct phishing or social engineering attacks.

Weakness classification

  • disclosure@vulncheck.com: CWE-79

Primary references