Zkea Zkeacms
7 CVEs affecting Zkea Zkeacms. Latest disclosed: 2025-09-21. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-52239 | Critical | 9.8 | 2025-08-04 | An arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code via a crafted file. |
CVE-2020-20670 | High | 8.8 | 2021-09-13 | An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTML file. |
CVE-2025-10764 | Medium | 6.3 | 2025-09-21 | A vulnerability was identified in SeriaWei ZKEACMS up to 4.3. This affects the function Edit of the file src/ZKEACMS.EventAction/Controllers/PendingTaskControl… |
CVE-2025-10471 | Medium | 6.3 | 2025-09-15 | A vulnerability was detected in ZKEACMS 4.3. Impacted is the function Proxy of the file src/ZKEACMS/Controllers/MediaController.cs. Performing manipulation of… |
CVE-2022-29362 | Medium | 5.4 | 2022-05-25 | A cross-site scripting (XSS) vulnerability in /navigation/create?ParentID=%23 of ZKEACMS v3.5.2 allows attackers to execute arbitrary web scripts or HTML via a… |
CVE-2025-10765 | Medium | 4.7 | 2025-09-21 | A security flaw has been discovered in SeriaWei ZKEACMS up to 4.3. This vulnerability affects the function CheckPage/Suggestions in the library cms-v4.3\wwwroo… |
CVE-2025-10766 | Medium | 4.3 | 2025-09-21 | A weakness has been identified in SeriaWei ZKEACMS up to 4.3. This issue affects the function Download of the file EventViewerController.cs. Executing manipula… |