← Back

Zstore

zstore

Vendor: Zippy • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-53985
1Zippy
1Zstore
Jun 17, 2026
Jan 13, 2026
5.1 MEDIUM· v4
6.1 MEDIUM· v3
N/A· v2
Zstore, now referred to as Zippy CRM, 6.5.4 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts through unvalidated input parameters. Attackers can submit crafted pay...Show more
Zstore, now referred to as Zippy CRM, 6.5.4 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts through unvalidated input parameters. Attackers can submit crafted payloads in manual insertion points to execute arbitrary JavaScript code in victim's browser context.Show less
CVE-2023-24648
1Zippy
1Zstore
Jun 17, 2026
Feb 13, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Zstore v6.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /index.php.