EUVD-2021-1293

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Cross Site Scripting vulnerability in Tribal Systems Zenario CMS allows remote code execution.

Reporter	Title	Published	Views	Family All 13
0day.today	Zenario CMS 8.8.52729 - (cID) Blind & Error based SQL injection (Authenticated) Vulnerability	11 Jun 202100:00	–	zdt
ATTACKERKB	CVE-2021-27673	15 Apr 202114:15	–	attackerkb
CNNVD	Zenario CMS 跨站脚本漏洞	15 Apr 202100:00	–	cnnvd
CVE	CVE-2021-27673	15 Apr 202113:51	–	cve
Cvelist	CVE-2021-27673	15 Apr 202113:51	–	cvelist
Exploit DB	Zenario CMS 8.8.52729 - 'cID' SQL injection (Authenticated)	11 Jun 202100:00	–	exploitdb
Github Security Blog	reflected XSS in tribalsystems/zenario	8 Jun 202120:11	–	github
NVD	CVE-2021-27673	15 Apr 202114:15	–	nvd
OSV	CVE-2021-27673	15 Apr 202114:15	–	osv
OSV	GHSA-8HCM-JJ4X-4GMR reflected XSS in tribalsystems/zenario	8 Jun 202120:11	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "3f5bdb2f-7d66-3173-857a-510415f314b6",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "8a5521f8-fc1c-3ff1-aeb5-72134841179d",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-27673
deadsh0t	www.deadsh0t.medium.com/blind-error-based-authenticated-sql-injection-on-zenario-8-8-52729-cms-d4705534df38
github	www.github.com/TribalSystems/Zenario
github	www.github.com/TribalSystems/Zenario/releases/tag/8.8.53370
packetstormsecurity	www.packetstormsecurity.com/files/163083/Zenario-CMS-8.8.52729-SQL-Injection.html
packetstormsecurity	www.packetstormsecurity.com/files/cve/CVE-2021-27673
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

5.1Medium risk

Vulners AI Score5.1

CVSS 3.14.8

CVSS 23.5

EPSS0.01089