Zentaopms · Zentaopms · CVE-2023-6439
**Name of the Vulnerable Software and Affected Versions**
ZenTao PMS version 18.8
**Description**
A problematic vulnerability was found in the software, affecting an unknown functionality, which leads to cross-site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
**Recommendations**
For ZenTao PMS version 18.8, update to a newer version to mitigate the risk, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the affected functionality to minimize the risk of exploitation.