Vendors / Zoho Subscriptions Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Zoho Subscriptions records in CISA KEV No Zoho Subscriptions vulnerabilities are listed in CISA KEV.
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zoho Subscriptions Zoho Billing zoho-subscriptions allows DOM-Based XSS.This issue affects Zoho Billing: from n/a thro…
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00283 · Published 2025-09-22 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zoho Subscriptions Zoho Billing – Embed Payment Form allows Stored XSS.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00298 · Published 2025-03-27 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High0 Medium2 Low0 No CVSS0