Lucene search
GitHub Advisory DatabaseGHSA-MR4W-7VM9-CGQXHistoryOct 06, 2023 - 3:30 p.m.
Zenario CMS Cross-site Scripting vulnerability
2023-10-0615:30:20
CWE-79
GitHub Advisory Database
github.com
15
cross-site scripting
zenario cms
arbitrary code execution
organizer - spare
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
18.2%
A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows an attacker to execute arbitrary code via a crafted script to the Organizer - Spare alias.
Affected configurations
Node
tribalsystemszenarioRange≤9.4.59197
| CPE | Name | Operator | Version |
|---|---|---|---|
| tribalsystems/zenario | le | 9.4.59197 |
Related
osv
osv
CVE-2023-44770
2023-10-06 13:15:13
Zenario CMS Cross-site Scripting vulnerability
2023-10-06 15:30:20
cvelist
cvelist
CVE-2023-44770
2023-10-06 00:00:00
prion
prion
Cross site scripting
2023-10-06 13:15:00
nvd
nvd
CVE-2023-44770
2023-10-06 13:15:13
cve
cve
CVE-2023-44770
2023-10-06 13:15:13
veracode
veracode
Cross Site Scripting (XSS)
2023-10-10 07:11:51
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
18.2%
Related for GHSA-MR4W-7VM9-CGQX