← Back

Zk Framework

zk_framework

Vendor: Zkoss • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-36537
1Zkoss
1Zk Framework
Jun 17, 2026
Aug 26, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader.
CVE-2013-5966
1Zkoss
1Zk Framework
Apr 29, 2026
Nov 20, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.