CVE-2026-30252 in Suite
Résumé (Anglaise)
Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda and red_url parameters.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Responsable
MITRE
Réserver
04/03/2026
Divulgation
03/04/2026
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 355010 | ZenShare Suite URL login.php cross site scripting | 79 | Non défini | Non défini | CVE-2026-30252 |