A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save_user funciton in save.php.
- https://zhhhy.github.io/2019/06/28/zzzcms/
No PoCs found on GitHub currently.