Medium severity5.4NVD Advisory· Published Nov 2, 2023· Updated Jun 17, 2026

CVE-2023-46475

Description

A Stored Cross-Site Scripting vulnerability was discovered in ZenTao 18.3 where a user can create a project, and in the name field of the project, they can inject malicious JavaScript code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zentao/Zentaollm-fuzzy2 versions
=18.3+ 1 more
- (no CPE)range: =18.3
- (no CPE)
Easysoft/Zentaopmsllm-fuzzy
Range: =18.3
Easycorp/Zentao
cpe:2.3:a:easycorp:zentao:18.3:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/elementalSec/CVE-Disclosures/blob/main/ZentaoPMS/CVE-2023-46475/CVE-2023-46475%20-%20Cross-Site%20Scripting%20%28Stored%29.mdnvdExploit

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000