Zentao · Zentao · CVE-2020-22533
**Name of the Vulnerable Software and Affected Versions**
Zentao (affected versions not specified)
**Description**
A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the `lang` parameter. This enables the attacker to inject malicious scripts into the website, potentially leading to unauthorized actions.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.