Skip to contentEasycorp Zentao vulnerabilities
- easycorp zentao, easysoft zentaopms +1 moreeasysoft zentaopms Editor index.php edit deserializationCVE-2025-51145.3 Medium
- easycorp zentaoZentao v18.0 to v18.10 was discovered to contain a remote code execution (RCE) vulnerability via...CVE-2024-242169.8 Critical
- easycorp zentao, zentao biz, zentao max +2 moreAn arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10...CVE-2024-242029.8 Critical
- easycorp zentaoZentao versions 4.1.3 and before has a URL redirect vulnerability, which prevents the system from...CVE-2023-493946.1 Medium
- easycorp zentaoZenTao PMS cross site scriptingCVE-2023-64393.5 Low
- easycorp zentaoA Stored Cross-Site Scripting vulnerability was discovered in ZenTao 18.3 where a user can create...CVE-2023-464755.4 Medium
- easycorp zentao, zentao biz, zentao max +2 moreAn issue in ZenTao Community Edition v.18.6 and before, ZenTao Biz v.8.6 and before, ZenTao Max v...CVE-2023-448278.8 High
- easycorp zentaoCross Site Scripting vulnerability in ZenTaoPMS v.18.6 allows a local attacker to obtain...CVE-2023-448265.4 Medium
- easycorp zentaoCross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to...CVE-2020-212686.1 Medium
- easycorp zentaoCross Site Scripting vulnerability found in Zentao allows a remote attacker to execute arbitrary...CVE-2020-225336.1 Medium
- easycorp zentaoZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can...CVE-2022-47745EPSS 15.4%8.8 High
- easycorp zentaoZentao Demo15 is vulnerable to Directory Traversal. The impact is: obtain sensitive information ...CVE-2022-377007.5 High
- easycorp zentaoA cross site scripting (XSS) issue in EasyCorp ZenTao 12.5.3 allows remote attackers to execute...CVE-2021-275586.1 Medium
- easycorp zentaoA cross-site request forgery (CSRF) vulnerability in the Cron job tab in EasyCorp ZenTao 12.5.3...CVE-2021-275574.3 Medium
- easycorp zentaoThe Cron job tab in EasyCorp ZenTao 12.5.3 allows remote attackers (who have admin access) to...CVE-2021-275567.2 High
- easycorp zentaoThe EasyCorp ZenTao PMS 12.4.2 application suffers from an arbitrary file upload vulnerability....CVE-2020-281659.8 Critical
- easycorp zentao proZenTao Pro Command InjectionCVE-2020-7361Public exploitEPSS 17.2%9.6 Critical