GitHub Advisoryadvisory · Packagist

GHSA-f92p-f8r2-c87q Tribal Systems Zenario CMS vulnerable to Cross-site Scripting

MEDIUM Published 2022-11-03 Modified 2022-11-03 Official page ↗
Aliases
CVE-2020-36608
Ecosystem
Packagist
Packages
tribalsystems/zenario
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2022-11-03

Affected packages

• Packagist tribalsystems/zenario: < 8.5.51340 → fixed in 8.5.51340

Description

A vulnerability has been found in Tribal Systems Zenario CMS prior to version 8.5.51340. Affected by this issue is some unknown functionality of the file `admin_organizer.js` of the component `Error Log Module`. The manipulation leads to cross site scripting. The attack may be launched remotely. The issue is patched in version 8.5.51340.

Related

Alias · CVE (1)

  • CVE-2020-36608 A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References