Cross site scripting

2019-08-0700:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

An issue was discovered in ZenTao 11.5.1. There is an XSS (stored) vulnerability that leads to the capture of other people’s cookies via the Rich Text Box.

CPENameOperatorVersion
zentaoeq11.5.1

CPE	Name	Operator	Version
	zentao	eq	11.5.1

References

github.com/easysoft/zentaopms/issues/35