Zelon88 vulnerabilities
We track 1 vulnerability in Zelon88 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2026.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest Zelon88 vulnerabilities
- 9.3 Critical severity
HRConvert2: Improper Neutralization of Special Elements used in an OS Command
HRConvert2 is a self-hosted, drag-and-drop & nosql file conversion server & share tool. Prior to 3.3.8, the sanitizeString() function in convertCore.php is missing backtick (`) and tab (\t) from its strip list. User input then reaches shell_exec(), where the s