Lucene search
GoogleOSV:CVE-2021-41952HistoryMar 14, 2022 - 3:15 p.m.
CVE-2021-41952
2022-03-1415:15:09
Google
osv.dev
3
zenario cms
cross site scripting
svg
upload
account takeover
Zenario CMS 9.0.54156 is vulnerable to Cross Site Scripting (XSS) via upload file to *.SVG. An attacker can send malicious files to victims and steals victim’s cookie leads to account takeover. The person viewing the image of a contact can be victim of XSS.
Related
cvelist
cvelist
CVE-2021-41952
2022-03-14 14:53:55
github
github
Cross-site Scripting in Zenario CMS
2022-03-15 00:00:59
osv
osv
Cross-site Scripting in Zenario CMS
2022-03-15 00:00:59
nvd
nvd
CVE-2021-41952
2022-03-14 15:15:09
prion
prion
Cross site scripting
2022-03-14 15:15:00
cve
cve
CVE-2021-41952
2022-03-14 15:15:09