Zstore

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-53985 Jan 13, 23:15 MEDIUM POC This Month

Zstore, now referred to as Zippy CRM, 6.5.4 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts through unvalidated input parameters. [CVSS 6.1 MEDIUM]

XSS Zstore Zippy

NVD GitHub Exploit-DB

CVSS 3.1

6.1

EPSS

0.1%

CVE-2023-24648 Feb 13, 21:15 MEDIUM POC This Month

Zstore v6.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /index.php. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Zstore Zippy

NVD GitHub

CVSS 3.1

6.1

EPSS

0.5%

CVE-2023-53985

EPSS 0% CVSS 6.1

MEDIUM POC This Month

XSS Zstore Zippy

NVD GitHub Exploit-DB

CVE-2023-24648

EPSS 0% CVSS 6.1

MEDIUM POC This Month

PHP XSS Zstore +1

NVD GitHub