Zentao

9 CVEs across 2 Zentao products. Browse Zentao vulnerabilities, severities, and proof-of-concept exploits.

Zentao products with known CVEs

ProductCVEs
Zentao5
Biz4
Zentao CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-2552Medium5.52026-02-16A vulnerability was identified in ZenTao up to 21.7.8. Affected by this issue is the function delete of the file editor/control.php of the component Committer…
CVE-2026-2551Medium5.42026-02-16A vulnerability was determined in ZenTao up to 21.7.8. Affected by this vulnerability is the function delete of the file editor/control.php of the component Ba…
CVE-2026-1884Medium4.72026-02-04A weakness has been identified in ZenTao up to 21.7.6-85642. The impacted element is the function fetchHook of the file module/webhook/model.php of the compone…
CVE-2025-13789Medium6.32025-11-30A vulnerability was found in ZenTao up to 21.7.6-8564. This affects the function makeRequest of the file module/ai/model.php. The manipulation of the argument…
CVE-2025-13787Medium5.42025-11-30A flaw has been found in ZenTao up to 21.7.6-8564. The affected element is the function file::delete of the file module/file/control.php of the component File…
CVE-2023-46376High7.52023-10-27Zentao Biz version 8.7 and before is vulnerable to Information Disclosure.
CVE-2023-46375High8.82023-10-27ZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF).
CVE-2023-46491Medium6.12023-10-27ZenTao Biz version 4.1.3 and before has a Cross Site Scripting (XSS) vulnerability in the Version Library.
CVE-2023-46374Medium6.12023-10-27ZenTao Enterprise Edition version 4.1.3 and before is vulnerable to Cross Site Scripting (XSS).