EasyCorp
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| EasyAdminBundle | 2 | – | Sep 14, 2026 |
| EasyAdmin | 1 | – | Mar 29, 2024 |
| ZenTao Pro | 1 | – | Aug 6, 2020 |
Exploited and recent CVEs
- CVE-2026-54087 EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField 0.4%
- CVE-2026-81892 EasyAdmin custom-action dispatcher bypasses access_control on other routes 0.4%
- CVE-2024-3081 EasyCorp EasyAdmin Autocomplete autocomplete.js cross site scripting 0.5%
- CVE-2020-7361 ZenTao Pro Command Injection 17.2%