An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php. After disabling JavaScript, you can directly access the administrator console.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-43703.json"