Skip to content
Noroxi

Zippy records

2 published records for vendor zippy.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

2 records
  • Zstore v6.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /index.php.

    MediumCVSS 6.1No exploitEPSS 0%

    zippy · zstoreFeb 13, 2023

  • Zstore 6.5.4 - Reflected Cross-Site Scripting (XSS)

    MediumCVSS 5.1No exploitEPSS 0%

    zippy · zstoreJan 13, 2026