Read the docs

Zomp

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Zomp records in CISA KEV

No Zomp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records

Priority HIGH 72

Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arbitrary PHP code through file manipulation endpoints.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00959 Published 2025-12-15 No fix listed CWE-94
Priority MEDIUM 56

Zomplog 3.9 contains a cross-site scripting vulnerability that allows authenticated users to inject malicious scripts when creating new pages.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00245 Published 2025-12-15 No fix listed CWE-79
Open these records in search →