Vendors / Zippy Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Zippy records in CISA KEV No Zippy vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 60
Zstore v6.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /index.php.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00473 · Published 2023-02-13 · No fix listed CWE-79
Priority MEDIUM 56
Zstore, now referred to as Zippy CRM, 6.5.4 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts through unvalidated input parameters.
CVSS 4.0 MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.0029 · Published 2026-01-13 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 0 2 0 0
