CVE-2024-45964

Zenario 9.7.61188 is vulnerable to Cross Site Scripting XSS in the Image library via the "Organizer tags" field...

Cross-site Scripting (XSS)

Overview tribalsystems/zenario is a Zenario is a web-based content management system for sites with one or many languages. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Organizer tags field. An attacker can manipulate the output or behavior of the applicatio...

CVE-2024-45964

Zenario 9.7.61188 is vulnerable to Cross Site Scripting XSS in the Image library via the "Organizer tags" field...

PT-2024-31858 · Zenario · Zenario

Name of the Vulnerable Software and Affected Versions: Zenario version 9.7.61188 Description: The issue is a Cross Site Scripting XSS vulnerability in the Image library of Zenario, specifically via the Organizer tags field. This allows for potential malicious script execution. Recommendations: Fo...

CVE-2024-45964

Zenario CMS version 9.7.61188 is vulnerable to Cross-Site Scripting (XSS) within its Image library . The root cause is the lack of effective filtering and escaping of user-supplied data in the "Organizer tags" field. An attacker can exploit this to inject a crafted payload that executes arbitrary...

Zenario CMS 安全漏洞

Zenario CMS is a Zenario open source application . Provides a Web-based content management system . A cross-site scripting vulnerability exists in Zenario CMS version 9.7.61188, which stems from the lack of effective filtering and escaping of user-supplied data in the "Organizer tags" field and c...

CVE-2024-45964: Improper Neutralization of Input During Web Page Generation

Zenario 9.7.61188 is vulnerable to Cross Site Scripting XSS in the Image library via the "Organizer tags" field...