VULNERABILITY INTELLIGENCE

CVE-2024-58307

CVSS score9.3 CRITICAL

EPSS probability0.51%

CISA KEVNot currently listed

Published2025-12-11

Last modified2026-10-27

Description

CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks and extract database information.