Zkeacms Security Vulnerabilities and Issues — Zkeacms CVE List

Lucene search

ZkeaZkeacms

3 matches found

CVE•added 2022/05/25 1:15 a.m.•89 views

CVE-2022-29362

A cross-site scripting (XSS) vulnerability in /navigation/create?ParentID=%23 of ZKEACMS v3.5.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ParentID parameter.

5.4CVSS5.2AI score0.00181EPSS

CVE•added 2021/09/13 10:15 p.m.•27 views

CVE-2020-20670

An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTML file.

8.8CVSS8.8AI score0.00706EPSS

CVE•added 2025/08/04 7:15 p.m.•12 views

CVE-2025-52239

An arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code via a crafted file.

9.8CVSS8AI score0.0008EPSS