CVE-2023-36162: Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privi...

Security readout for executives and security teams

CVE-2023-36162 describes a CSRF issue in ZZCMS v2023 and earlier that could let an attacker gain privileges through the adminlist.php add function. The sources do not provide CVSS, patch status, or confirmed exploitation, so urgency depends on whether ZZCMS administration is exposed and actively used. Organizations are most likely exposed if they run ZZCMS v2023 or earlier and administrators access the admin interface from browsers that can reach attacker-controlled content. Product/version identifiers in the CVE metadata are incomplete. Treat this as a targeted web-admin risk until exposure is confirmed. Prioritize inventory and admin-interface restriction first, because the public record lacks severity scoring and patch details. Mitigation focus: Check ZZCMS vendor or project guidance for a fixed release.; Inventory any ZZCMS deployments and identify versions at or before 2023.; Restrict administrative access to trusted networks or VPN where possible..

Prepared

Jun 2, 2026, 01:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.