Login Request a demo
ZE
Product
ZendTo
by Zend · last CVE Apr 5, 2025
8
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 2Medium 3Low 0
Severity
All severities8Critical2High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ZendTo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-27888
6.1
1%
Mar 2
ZendTo before 6.06-4 Beta allows XSS during the display of a drop-off in which a filename has unexpected characters
Affected: through 6.05-4; 6.06-1; 6.06-2; 6.06-3
CVE-2018-1000841
6.1
1%
Dec 20
Zend.To version Prior to 5.15-1 contains a Cross Site Scripting (XSS) vulnerability in The verify.php page that can result in An attacker could execute arbitrary Javascript code…
Affected: before 5.15-1
CVE-2025-32352
4.8
0%
Apr 5
A type confusion vulnerability in lib/NSSAuthenticator.php in ZendTo before v5.04-7 allows remote attackers to bypass authentication for users with passwords stored as MD5 hashes…
Affected: before 5.04-7
Showing 3