← Back

Zkoss

zkoss

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Zk Framework
zk_framework
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-36537
1Zkoss
1Zk Framework
Jun 17, 2026
Aug 26, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader.
CVE-2013-5966
1Zkoss
1Zk Framework
Apr 29, 2026
Nov 20, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.