Easycorp vulnerabilities

Products

• Zentao 16
• Easyadminbundle 2
• Zentao Biz 2
• Zentao Max 2

Newest

• easycorp easyadminbundle EasyAdmin custom-action dispatcher bypasses access_control on other routes CVE-2026-81892 Fix available 8.1 HighAugust 31, 2026
• easycorp easyadminbundle EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField CVE-2026-54087 Fix available 7.6 HighJuly 14, 2026
• easycorp zentao, easysoft zentaopms +1 more easysoft zentaopms Editor index.php edit deserialization CVE-2025-5114 5.3 MediumMay 23, 2025
• easycorp easyadmin EasyCorp EasyAdmin Autocomplete autocomplete.js cross site scripting CVE-2024-3081 3.5 LowMarch 29, 2024
• easycorp zentao Zentao v18.0 to v18.10 was discovered to contain a remote code execution (RCE) vulnerability via... CVE-2024-24216 9.8 CriticalFebruary 8, 2024
• easycorp zentao, zentao biz, zentao max +2 more An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10... CVE-2024-24202 9.8 CriticalFebruary 8, 2024
• easycorp zentao Zentao versions 4.1.3 and before has a URL redirect vulnerability, which prevents the system from... CVE-2023-49394 6.1 MediumJanuary 10, 2024
• easycorp zentao ZenTao PMS cross site scripting CVE-2023-6439 3.5 LowNovember 30, 2023
• easycorp zentao A Stored Cross-Site Scripting vulnerability was discovered in ZenTao 18.3 where a user can create... CVE-2023-46475 5.4 MediumNovember 2, 2023
• easycorp zentao, zentao biz, zentao max +2 more An issue in ZenTao Community Edition v.18.6 and before, ZenTao Biz v.8.6 and before, ZenTao Max v... CVE-2023-44827 8.8 HighOctober 10, 2023
• easycorp zentao Cross Site Scripting vulnerability in ZenTaoPMS v.18.6 allows a local attacker to obtain... CVE-2023-44826 5.4 MediumOctober 10, 2023
• easycorp zentao Cross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to... CVE-2020-21268 6.1 MediumJune 20, 2023
• easycorp zentao Cross Site Scripting vulnerability found in Zentao allows a remote attacker to execute arbitrary... CVE-2020-22533 6.1 MediumApril 4, 2023
• easycorp zentao ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can... CVE-2022-47745 EPSS 15.4% 8.8 HighJanuary 19, 2023
• easycorp zentao Zentao Demo15 is vulnerable to Directory Traversal. The impact is: obtain sensitive information ... CVE-2022-37700 7.5 HighSeptember 19, 2022
• easycorp zentao A cross site scripting (XSS) issue in EasyCorp ZenTao 12.5.3 allows remote attackers to execute... CVE-2021-27558 6.1 MediumAugust 31, 2021
• easycorp zentao A cross-site request forgery (CSRF) vulnerability in the Cron job tab in EasyCorp ZenTao 12.5.3... CVE-2021-27557 4.3 MediumAugust 31, 2021
• easycorp zentao The Cron job tab in EasyCorp ZenTao 12.5.3 allows remote attackers (who have admin access) to... CVE-2021-27556 7.2 HighAugust 31, 2021
• easycorp zentao The EasyCorp ZenTao PMS 12.4.2 application suffers from an arbitrary file upload vulnerability.... CVE-2020-28165 9.8 CriticalAugust 12, 2021
• easycorp zentao pro ZenTao Pro Command Injection CVE-2020-7361 Public exploit EPSS 17.2% 9.6 CriticalAugust 6, 2020