Skip to content

CSZ-CMS V.1.3.2 Releases

Latest

Choose a tag to compare

@cskaza cskaza released this 02 Nov 19:44

CSZ-CMS V.1.3.2 (2025-11-03)

  • It can add the Article date when create new one.
  • Update elFinder to 2.1.66.
  • Remove default email and pass on installation page.
  • Remove manual upgrade function on backend for security below.
  • Security issue: https://github.com/fax77829yz/CSZ_CMS-exploit (The SQL commands are not sanitized through the upload function, allowing attackers to execute arbitrary code by uploading a crafted ZIP file containing malicious SQL commands)
  • Security issue: https://github.com/capture0x/CSZ_CMS (CSZ CMS Version 1.3.0 Remote Command Execution)
  • Support PHP 8.3.
  • Fixed more important bug.