Cross site scripting

2023-06-2015:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

easysoft zentao

v11.6.4

remote attacker

arbitrary code

lastcomment parameter

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.5%

Cross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to execute arbitrary code via the lastComment parameter.

CPENameOperatorVersion
zentaoeq11.6.4

CPE	Name	Operator	Version
	zentao	eq	11.6.4

References

github.com/easysoft/zentaopms/issues/40