Zrlog vulnerabilities

Products

• Zrlog 12

Newest

• zrlog zrlog v3.1.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the downloadUrl... CVE-2025-45872 9.8 CriticalJuly 1, 2025
• zrlog Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog... CVE-2020-27514 9.1 CriticalAugust 11, 2023
• zrlog Cross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote attacker to execute... CVE-2020-21052 6.1 MediumJune 20, 2023
• zrlog ZrLog 2.2.2 has a remote command execution vulnerability at plugin download function, it could... CVE-2021-44094 7.8 HighNovember 28, 2021
• zrlog A Remote Command Execution vulnerability on the background in zrlog 2.2.2, at the upload avatar... CVE-2021-44093 9.8 CriticalNovember 28, 2021
• zrlog Cross Site Scripting vulnerability in ZrLog 2.1.0 via the (1) userName and (2) email parameters... CVE-2020-18066 6.1 MediumJune 29, 2021
• zrlog A Cross-site scripting (XSS) vulnerability exists in the comment section in ZrLog 2.1.3, which... CVE-2020-21316 6.1 MediumJune 15, 2021
• zrlog zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other... CVE-2020-19005 5.7 MediumAugust 25, 2020
• zrlog An issue was discovered in ZrLog 2.1.1. There is a Stored XSS vulnerability in the article_edit... CVE-2019-16643 5.4 MediumSeptember 20, 2019
• zrlog An issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field... CVE-2018-17079 6.1 MediumJune 19, 2019
• zrlog An issue was discovered in ZrLog 2.0.3. There is stored XSS in the file upload area via a crafted... CVE-2018-17421 6.1 MediumMarch 7, 2019
• zrlog An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article... CVE-2018-17420 7.2 HighMarch 7, 2019