Ztree Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ztree Project records in CISA KEV

No Ztree Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ztree 1 record LOW

Records

1 record

TI-2015-06111 CVE-2015-7348 · GHSA-jqpq-72xc-xqvj

Cross-site scripting (XSS) vulnerability in zTree 3.5.19.1 and possibly earlier allows…

LOW 24

Cross-site scripting (XSS) vulnerability in zTree 3.5.19.1 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to demo/en/asyncData/getNodesForBigData.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01917 Published 2015-12-07 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0