Browse CVEs

MEDIUM 5.5 CVE-2026-2552 A vulnerability was identified in ZenTao up to 21.7.8. Affected by this issue is the function delete of the file editor/control.php of the component … Zentao after 21.7.8 Fix from $1,6002026-02-16 MEDIUM 5.4 CVE-2026-2551 A vulnerability was determined in ZenTao up to 21.7.8. Affected by this vulnerability is the function delete of the file editor/control.php of the co… Zentao after 21.7.8 Fix from $1,6002026-02-16 MEDIUM 5.3 CVE-2025-13789 A vulnerability was found in ZenTao up to 21.7.6-8564. This affects the function makeRequest of the file module/ai/model.php. The manipulation of the… Zentao 21.7.6+ Fix from $1,6002025-11-30 CRITICAL 9.1 CVE-2025-13787 A flaw has been found in ZenTao up to 21.7.6-8564. The affected element is the function file::delete of the file module/file/control.php of the compo… Zentao 21.7.7+ Fix from $2,3002025-11-30 HIGH 8.8 CVE-2023-46375 ZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF). Biz after 4.1.3 Fix from $1,9502023-10-27 HIGH 7.5 CVE-2023-46376 Zentao Biz version 8.7 and before is vulnerable to Information Disclosure. Biz after 8.7 Fix from $1,9502023-10-27 MEDIUM 6.1 CVE-2023-46374 ZenTao Enterprise Edition version 4.1.3 and before is vulnerable to Cross Site Scripting (XSS). Biz after 4.1.3 Fix from $1,6002023-10-27 MEDIUM 6.1 CVE-2023-46491 ZenTao Biz version 4.1.3 and before has a Cross Site Scripting (XSS) vulnerability in the Version Library. Biz after 4.1.3 Fix from $1,6002023-10-27