Zenario CMS 安全漏洞

Zenario CMS is a Zenario open source application. Provides a web-based content management system. A security vulnerability exists in Zenario CMS prior to version 9.5.60437, which stems from the Twig Snippet plugin and the insecure use of Twig filters in site-wide HEAD and BODY elements, which cou...

CVE-2024-34460

The CVE-2024-34460 issue affects Zenario’s Tree Explorer tool from Organizer in Zenario prior to version 9.5.60602, where the XSS vulnerability exists in that component. The Tree Explorer was removed in 9.5.60602, indicating remediation by removal, with later versions no longer exposed to this fl...

PT-2024-25915 · Unknown +1 · Twig Snippet Plugin +1

Name of the Vulnerable Software and Affected Versions: Zenario versions prior to 9.5.60437 Description: The issue is related to the insecure use of Twig filters in the Twig Snippet plugin and in the site-wide HEAD and BODY elements, allowing code execution by a designer or an administrator...

GHSA-8G87-73VQ-443P Zenario CMS Cross-site Scripting vulnerability

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias...

Zenario CMS Cross-site Scripting vulnerability

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias...

CVE-2023-44769

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias...

CVE-2023-44769

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias...

Cross site scripting

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias...

Zenario CMS Cross-Site Scripting Vulnerability

Zenario CMS is a Zenario open source application . Provides a Web-based content management system . A security vulnerability exists in Zenario CMS version v.9.4.59197, which stems from the presence of a cross-site scripting XSS vulnerability that allows local attackers to execute arbitrary code v...

CVE-2023-44769

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias...

CVE-2023-44769

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias...

CVE-2023-44769

CVE-2023-44769 affects Zenario CMS v9.4.59197. It is a Cross-Site Scripting (XSS) vulnerability that allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias. The CVSSv3.1 base score is 5.4 (Medium) with Privileges Required: Low and User Interaction: ...

CVE-2023-44769

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias...

PT-2023-29292 · Unknown · Zenario Cms

Name of the Vulnerable Software and Affected Versions: Zenario CMS version 9.4.59197 Description: A Cross-Site Scripting XSS issue allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias. This enables the attacker to potentially perform unauthorized...

Cross Site Scripting

zenario is vulnerable to Cross Site Scripting XSS. An attacker is able to execute arbitrary code via a crafted script to the Page Layout...

Cross Site Scripting (XSS)

zenario is vulnerable to Cross Site Scripting. The vulnerability is due to a lack of user input sanitization in the Organizer - Spare alias. An attacker can exploit this issue by injecting malicious JavaScript on the client side...

GHSA-6CXV-27R2-FP3M Zenario CMS Cross-site Scripting vulnerability

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Page Layout...

Zenario CMS Cross-site Scripting vulnerability

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows an attacker to execute arbitrary code via a crafted script to the Organizer - Spare alias...

GHSA-MR4W-7VM9-CGQX Zenario CMS Cross-site Scripting vulnerability

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows an attacker to execute arbitrary code via a crafted script to the Organizer - Spare alias...

Zenario CMS Cross-site Scripting vulnerability

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Page Layout...