Cross site scripting

Cross Site Scripting vulnerability in ZenTaoPMS v.18.6 allows a local attacker to obtain sensitive information via a crafted script...

CVE-2023-44826

Cross Site Scripting vulnerability in ZenTaoPMS v.18.6 allows a local attacker to obtain sensitive information via a crafted script...

CVE-2023-44826

Cross Site Scripting vulnerability in ZenTaoPMS v.18.6 allows a local attacker to obtain sensitive information via a crafted script...

CVE-2023-44826

Cross Site Scripting vulnerability in ZenTaoPMS v.18.6 allows a local attacker to obtain sensitive information via a crafted script...

CVE-2023-44826

CVE-2023-44826 affects ZenTaoPMS v18.6 with a Cross Site Scripting vulnerability that could allow a local attacker to obtain sensitive information via a crafted script. The available connected sources identify ZenTaoPMS 18.6 as vulnerable and recommend upgrading to a version that includes a fix. ...

PT-2023-29305 · Zentaopms · Zentaopms

Name of the Vulnerable Software and Affected Versions: ZenTaoPMS version 18.6 Description: A Cross Site Scripting issue allows a local attacker to obtain sensitive information via a crafted script. Recommendations: For ZenTaoPMS version 18.6, update to a version that includes a fix for this issue...

Cross-Site Request Forgery (CSRF) in easysoft/zentaopms

✍️ Description When you don't set the SameSite attribute of cookies the browsers have special act in front of this issue.I mean set default value on it chrome and chromium based browsers set the attribute "Lax" that mean if you do add/delete/alter operation in a get HTTP request then your site mor...

ZenTaoPMS (Zendo) Arbitrary File Upload Vulnerability

ZenTaoPMS ZenTao is a home-grown open source project management software. ZenTaoPMS Zendo software has an arbitrary file upload vulnerability , in the windows environment upload module source code of the blacklist filter can be bypassed , allowing attackers to exploit this vulnerability to upload...

ZenTaoPMS (Zendo) Arbitrary Code Execution Vulnerability

ZenTaoPMS ZenTao is home-made open source project management software. ZenTaoPMS Zendo arbitrary code execution vulnerability exists. Due to the ZenTaoPMS software source code in the upgrade.php file module lack of permissions verification , allowing attackers to exploit this vulnerability can be...