PatchTheCVE: zucchettihttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-61431: A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp endpoint of Zucchetti ZMahttps://patchthecve.com/cve/CVE-2025-61431.htmlhttps://patchthecve.com/cve/CVE-2025-61431.htmlWed, 17 Jun 2026 09:50:31 +0000MEDIUM 6.1: A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp endpoint of Zucchetti ZMaintenance Infinity and Infinity Zucchetti v4.1 and earlier allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into the pHtmlSCVE-2025-52180: Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Infinity 4.2 and earlier allows remote unauthentihttps://patchthecve.com/cve/CVE-2025-52180.htmlhttps://patchthecve.com/cve/CVE-2025-52180.htmlWed, 17 Jun 2026 09:36:05 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Infinity 4.2 and earlier allows remote unauthenticated attackers to inject arbitrary JavaScript via the pHtmlSource parameter of the /ahi/jsp/gsfr_feditorHTML.jsp?pHtmlSource endpoint.CVE-2024-51322: Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achievhttps://patchthecve.com/cve/CVE-2024-51322.htmlhttps://patchthecve.com/cve/CVE-2024-51322.htmlWed, 17 Jun 2026 08:05:36 +0000MEDIUM 5.4: Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /jsp/home.jsp, /jsp/gsfr_feditorHTML.jsp, /servlet/SPVisualZoom, /jsp/gsmd_container.jsp componentsCVE-2024-51321: In Zucchetti Ad Hoc Infinity 2.4, an improper check on the m_cURL parameter allows an attacker to redirect thehttps://patchthecve.com/cve/CVE-2024-51321.htmlhttps://patchthecve.com/cve/CVE-2024-51321.htmlWed, 17 Jun 2026 08:05:35 +0000HIGH 7.6: In Zucchetti Ad Hoc Infinity 2.4, an improper check on the m_cURL parameter allows an attacker to redirect the victim to an attacker-controlled website after the authentication.CVE-2024-51320: Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achievhttps://patchthecve.com/cve/CVE-2024-51320.htmlhttps://patchthecve.com/cve/CVE-2024-51320.htmlWed, 17 Jun 2026 08:05:35 +0000MEDIUM 5.4: Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /servlet/gsdm_fsave_htmltmp, /servlet/gsdm_btlk_openfile componentsCVE-2024-51319: A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authentichttps://patchthecve.com/cve/CVE-2024-51319.htmlhttps://patchthecve.com/cve/CVE-2024-51319.htmlWed, 17 Jun 2026 08:05:35 +0000HIGH 7.3: A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell through /jsp/zimg_upload.jsp.CVE-2023-42234: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request Forgery (CSRF) via the https://patchthecve.com/cve/CVE-2023-42234.htmlhttps://patchthecve.com/cve/CVE-2023-42234.htmlWed, 17 Jun 2026 06:23:36 +0000MEDIUM 5.4: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request Forgery (CSRF) via the WSCView function.CVE-2023-42233: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the Filter/https://patchthecve.com/cve/CVE-2023-42233.htmlhttps://patchthecve.com/cve/CVE-2023-42233.htmlWed, 17 Jun 2026 06:23:36 +0000MEDIUM 6.1: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the Filter/FilterEditor function.CVE-2023-42232: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Navigator/Indehttps://patchthecve.com/cve/CVE-2023-42232.htmlhttps://patchthecve.com/cve/CVE-2023-42232.htmlWed, 17 Jun 2026 06:23:35 +0000HIGH 7.5: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function.CVE-2023-42231: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Controlhttps://patchthecve.com/cve/CVE-2023-42231.htmlhttps://patchthecve.com/cve/CVE-2023-42231.htmlWed, 17 Jun 2026 06:23:35 +0000HIGH 8.1: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can delete admin users by sending a request to the "WSCView/Delete" function.CVE-2023-42230: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the WSCViewhttps://patchthecve.com/cve/CVE-2023-42230.htmlhttps://patchthecve.com/cve/CVE-2023-42230.htmlWed, 17 Jun 2026 06:23:35 +0000MEDIUM 6.1: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the WSCView/Save function.CVE-2023-42229: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversalhttps://patchthecve.com/cve/CVE-2023-42229.htmlhttps://patchthecve.com/cve/CVE-2023-42229.htmlWed, 17 Jun 2026 06:23:35 +0000MEDIUM 6.5: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal. Arbitrary files can be created on the system via authenticated SOAP requests to the WSConnector service.CVE-2023-42228: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Controlhttps://patchthecve.com/cve/CVE-2023-42228.htmlhttps://patchthecve.com/cve/CVE-2023-42228.htmlWed, 17 Jun 2026 06:23:35 +0000HIGH 8.8: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can edit their own ACL rules by sending a request to the "AclList/SaveAclRules" administrative function.CVE-2023-42227: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save fhttps://patchthecve.com/cve/CVE-2023-42227.htmlhttps://patchthecve.com/cve/CVE-2023-42227.htmlWed, 17 Jun 2026 06:23:34 +0000HIGH 7.5: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function.CVE-2023-42226: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachmehttps://patchthecve.com/cve/CVE-2023-42226.htmlhttps://patchthecve.com/cve/CVE-2023-42226.htmlWed, 17 Jun 2026 06:23:34 +0000HIGH 7.5: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment function.CVE-2023-42225: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Attachment/Dowhttps://patchthecve.com/cve/CVE-2023-42225.htmlhttps://patchthecve.com/cve/CVE-2023-42225.htmlWed, 17 Jun 2026 06:23:34 +0000HIGH 7.5: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Attachment/DownloadTempFile function.