CVE Intelligence

Interzen vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Interzen products: 2 record(s), with severity, exploitation and fixes.

Zenshare Suite 1Zencrm 1Zenhr 1Zenproject 1Zenpurchase 1

Exploited only (KEV) →

CVE-2026-30252 Medium · 6.1 CWE-79 Apr 2, 2026
Cross-site Scripting (XSS) in Interzen Zencrm
Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda and red_url parameters.
CVE-2026-30251 Medium · 6.1 CWE-79 Apr 2, 2026
Cross-site Scripting (XSS) in Interzen Zenshare Suite
A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda parameter.