PT-2024-31856 · Zenario · Zenario

Name of the Vulnerable Software and Affected Versions: Zenario version 9.7.61188 Description: The issue allows authenticated admin users to upload PDF files containing malicious code into the target system. If the PDF file is accessed through the website, it can trigger a Cross Site Scripting XSS...

CVE-2024-45964

Zenario 9.7.61188 is vulnerable to Cross Site Scripting XSS in the Image library via the "Organizer tags" field...

CVE-2024-45960

Zenario 9.7.61188 allows authenticated admin users to upload PDF files containing malicious code into the target system. If the PDF file is accessed through the website, it can trigger a Cross Site Scripting XSS attack...

Cross-site Scripting (XSS)

tribalsystems/zenario is vulnerable to Cross-site Scripting XSS via the Tree Explorer tool. An attacker can inject malicious scripts that can be executed in the context of the user's browser by crafting malicious input...

Arbitrary Code Execution

Zenario is vulnerable to Arbitrary Code Execution. The vulnerability is due to insecure usage of Twig filters in the Twig Snippet plugin and in the site-wide HEAD and BODY elements, allowing designers or administrators to execute arbitrary code...

GHSA-7QWJ-GCJF-828F Zenario's Tree Explorer tool from Organizer affected by Cross-site Scripting

The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. This component was removed in 9.5.60602...

Zenario uses Twig filters insecurely in the Twig Snippet plugin

Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin, and in the site-wide HEAD and BODY elements, enabling code execution by a designer or an administrator...

Zenario's Tree Explorer tool from Organizer affected by Cross-site Scripting

The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. This component was removed in 9.5.60602...

GHSA-HR2R-W6WC-25PV Zenario uses Twig filters insecurely in the Twig Snippet plugin

Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin, and in the site-wide HEAD and BODY elements, enabling code execution by a designer or an administrator...

CVE-2024-34460

The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. This component was removed in 9.5.60602...

CVE-2024-34461

Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin, and in the site-wide HEAD and BODY elements, enabling code execution by a designer or an administrator...

CVE-2024-34460

The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. This component was removed in 9.5.60602...

PT-2024-25914 · Zenario · Zenario

Name of the Vulnerable Software and Affected Versions: Zenario versions prior to 9.5.60602 Description: The Tree Explorer tool from Organizer in Zenario is affected by a cross-site scripting XSS issue. This component was removed in version 9.5.60602. Recommendations: For versions prior to...

CVE-2024-34461

Summary (CVE-2024-34461): Zenario before 9.5.60437 is vulnerable due to insecure use of Twig filters in the Twig Snippet plugin and in the site-wide HEAD and BODY elements, enabling code execution by a designer or an administrator. Connected sources consistently describe the same issue across Red...

CVE-2024-34461

Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin, and in the site-wide HEAD and BODY elements, enabling code execution by a designer or an administrator...

Zenario CMS 跨站脚本漏洞

Zenario CMS is a Zenario open source application. It provides a web-based content management system. A cross-site scripting vulnerability exists in versions of Zenario CMS prior to 9.5.60602, which stems from the Tree Explorer tool in Organizer being susceptible to cross-site scripting...

CVE-2024-34461

Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin, and in the site-wide HEAD and BODY elements, enabling code execution by a designer or an administrator...

CVE-2024-34460

The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. This component was removed in 9.5.60602...

Zenario CMS 安全漏洞

Zenario CMS is a Zenario open source application. Provides a web-based content management system. A security vulnerability exists in Zenario CMS prior to version 9.5.60437, which stems from the Twig Snippet plugin and the insecure use of Twig filters in site-wide HEAD and BODY elements, which cou...

PT-2024-25915 · Unknown +1 · Twig Snippet Plugin +1

Name of the Vulnerable Software and Affected Versions: Zenario versions prior to 9.5.60437 Description: The issue is related to the insecure use of Twig filters in the Twig Snippet plugin and in the site-wide HEAD and BODY elements, allowing code execution by a designer or an administrator...