Zippy

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Zippy records in CISA KEV

No Zippy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Zstore 2 records MEDIUM

Records

2 records in Zstore · all components

TI-2023-10239 CVE-2023-24648 · GHSA-rqgm-f5qx-rhq8

Zstore v6.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /index.php.

MEDIUM 60

Zstore v6.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /index.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00473 Published 2023-02-13 No fix listed CWE-79

TI-2023-30268 CVE-2023-53985 · GHSA-2x2q-jj8j-27f7

Zstore 6.5.4 - Reflected Cross-Site Scripting (XSS)

MEDIUM 56

Zstore, now referred to as Zippy CRM, 6.5.4 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts through unvalidated input parameters.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0029 Published 2026-01-13 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0