GHSA-8g87-73vq-443p

Zenario CMS Cross-site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-44769

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	tribalsystems/zenario	<= 9.4.59197	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2023-44769 advisory
https://github.com/TribalSystems/Zenario package
https://github.com/sromanhu/CVE-2023-44769_ZenarioCMS--Reflected-XSS---Alias/tree/main web
https://github.com/sromanhu/ZenarioCMS--Reflected-XSS---Alias/tree/main web