CVE-2026-30252

The ZenShare Suite application by Interzen Consulting S.r.l is vulnerable to multiple Reflected Cross-Site Scripting (XSS) vulnerabilities in the login.php endpoint. The root cause is the improper neutralization of input in the codice_azienda and red_url (GET) parameters. An attacker can exploit ...

CVE-2026-30251

Interzen Consulting S.r.l ZenShare Suite v17.0 is vulnerable to a reflected cross-site scripting (XSS) flaw in the login_newpwd.php endpoint. Attackers can execute arbitrary JavaScript in a user's browser by injecting a malicious payload into the codice_azienda (GET) parameter via a crafted URL. ...