CyberSecBulletin

Zomplog vulnerabilities

We track 1 vulnerability in Zomplog products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 15, 2025.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Zomplog vulnerabilities

  • 8.8 High severity

    Zomplog: Improper Control of Generation of Code

    CVE-2023-53888Zomplog

    Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arbitrary PHP code through file manipulation endpoints. Attackers can upload files (such as JavaScript) and rename them to .php via the saveE a