CVE-2024-45964

Zenario CMS version 9.7.61188 is vulnerable to Cross-Site Scripting (XSS) within its Image library . The root cause is the lack of effective filtering and escaping of user-supplied data in the "Organizer tags" field. An attacker can exploit this to inject a crafted payload that executes arbitrary...