Zkoss Zk Framework — known CVE vulnerabilities

Every CVE whose affected-product data names Zkoss Zk Framework, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-36537 — CVSS 7.5 (high) — actively exploited: ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent…
• CVE-2013-5966 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via…