medium6.1
CVE-2020-36608
Tribal Systems Zenario CMS vulnerable to Cross-site Scripting
Impact
A vulnerability has been found in Tribal Systems Zenario CMS prior to version 8.5.51340. Affected by this issue is some unknown functionality of the file `admin_organizer.js` of the component `Error Log Module`. The manipulation leads to cross site scripting. The attack may be launched remotely. The issue is patched in version 8.5.51340.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | tribalsystems/zenario | < 8.5.51340 | 8.5.51340 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tribalsystems | Zenario | before 8.7 |