CVE-2015-7348

🗓️ 07 Dec 2015 20:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 38 Views🌐 WEB

Cross-site scripting (XSS) vulnerability in zTree 3.5.19.

Reporter	Title	Published	Views	Family All 8
0day.today	zTree 3.5.19.1 Cross Site Scripting Vulnerability	18 Nov 201500:00	–	zdt
CNVD	zTree Cross-Site Scripting Vulnerability	22 Nov 201500:00	–	cnvd
Cvelist	CVE-2015-7348	7 Dec 201520:00	–	cvelist
EUVD	EUVD-2015-7272	7 Oct 202500:30	–	euvd
NVD	CVE-2015-7348	7 Dec 201520:59	–	nvd
OpenVAS	zTree Cross Site Scripting Vulnerability	16 Dec 201500:00	–	openvas
Packet Storm	zTree 3.5.19.1 Cross Site Scripting	17 Nov 201500:00	–	packetstorm
Prion	Cross site scripting	7 Dec 201520:59	–	prion

NVD

Node

ztree_project ztreeRange≤3.5.19.1

Source	Link
seclists	www.seclists.org/fulldisclosure/2015/Nov/80
packetstormsecurity	www.packetstormsecurity.com/files/134391/zTree-3.5.19.1-Cross-Site-Scripting.html
github	www.github.com/zTree/zTree_v3/commit/b8fb6551e9b970ad37134af0562ffabe24a7672d

Parameter	Position	Path	Description	CWE
id	query param	/zTree_v3-master/demo/en/asyncData/getNodesForBigData.php	XSS via id parameter in getNodesForBigData.php (POC provided)	CWE-79
id	request body	/zTree_v3-master/demo/en/asyncData/getNodes.php	XSS via id parameter in getNodes.php (POST)	CWE-79

06 May 2026 22:30Current

6Medium risk

Vulners AI Score6

CVSS 24.3

EPSS0.00296

cve-2015-7348 cross-site scripting xss ztree security vulnerability nvd