CVE-2024-7924

Name of the Vulnerable Software and Affected Versions ZZCMS version 2023

Description A critical vulnerability was found in ZZCMS 2023, affecting unknown code in the file /I/list.php. The manipulation of the skin argument leads to path traversal. This issue can be exploited remotely. The exploit has been disclosed to the public and may be used.

Recommendations As a temporary workaround, consider restricting access to the /I/list.php file until a patch is available. Avoid using the skin argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.