CVE-2021-47738 | CSZ CMS 1.2.7 Private Message cross site scripting (Exploit 48354 / EDB-48354)

A vulnerability classified as problematic has been found in CSZ CMS 1.2.7. This affects an unknown part of the component Private Message Handler. The manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2021-47738. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.