~ / search / GHSA-gmf5-q34v-vwvp

GHSA-gmf5-q34v-vwvp

Cross-site Scripting in Zenario

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-44073

Packages

EcosystemPackageAffectedFixed in
Packagist tribalsystems/zenario <= 9.3.57186 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via svg, Users & Contacts.

References

External links from the advisory. They lead to third-party sites.