Zk Framework

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-36537 Maven HIGH POC KEV PATCH THREAT This Week

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Zk Framework

NVD

CVSS 3.1

7.5

EPSS

95.3%

CVE-2013-5966 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

XSS Zk Framework

NVD GitHub

CVSS 2.0

4.3

EPSS

0.4%

CVE-2022-36537 Maven

EPSS 95% CVSS 7.5

HIGH POC KEV PATCH THREAT This Week

Information Disclosure Zk Framework

NVD

CVE-2013-5966

EPSS 0% CVSS 4.3

MEDIUM This Month

XSS Zk Framework

NVD GitHub