dylanjkotze vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20242
3. 20252
4. 20262

Newest CVEs

• CVE-2026-120514

  Zephyr Project Manager <= 3.3.209 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'zpm_profile_picture' Parameter

  dylanjkotze · Zephyr Project Manager

  Medium5.4
• CVE-2026-76931

  Zephyr Project Manager <= 3.3.205 - Authenticated (Custom+) Stored Cross-Site Scripting via 'message' Parameter

  dylanjkotze · Zephyr Project Manager

  Medium6.4
• CVE-2025-12496

  Zephyr Project Manager <= 3.3.203 - Authenticated (Custom+) Arbitrary File Read And Server-Side Request Forgery

  dylanjkotze · Zephyr Project Manager

  Medium4.9
• CVE-2025-10490

  Zephyr Project Manager <= 3.3.202 - Authenticated (Admin+) Stored Cross-Site Scripting

  dylanjkotze · Zephyr Project Manager

  Medium4.4
• CVE-2024-7624

  Zephyr Project Manager <= 3.3.101 - Authenticated (Subscriber+) Limited Privilege Escalation

  dylanjkotze · Zephyr Project Manager

  High8.1
• CVE-2024-7356

  Zephyr Project Manager <= 3.3.100 - Authenticated (Subscriber+) Stored Cross-Site Scripting via filename Parameter

  dylanjkotze · Zephyr Project Manager

  Medium6.4
• CVE-2022-1822

  Zephyr Project Manager <= 3.2.40 - Reflected Cross-Site Scripting

  dylanjkotze · Zephyr Project Manager

  Medium6.1