CVE-2026-30251

Interzen Consulting S.r.l ZenShare Suite v17.0 is vulnerable to a reflected cross-site scripting (XSS) flaw in the login_newpwd.php endpoint. Attackers can execute arbitrary JavaScript in a user's browser by injecting a malicious payload into the codice_azienda (GET) parameter via a crafted URL. ...