medium4.8
CVE-2023-39578
A stored cross-site scripting (XSS) vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a cr…
Impact
A stored cross-site scripting (XSS) vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tribalsystems | Zenario | Version 9.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/anh91/Zenario-xss/issues/1
- https://panda002.hashnode.dev/a-stored-cross-site-scripting-xss-vulnerability-in-the-create-the-function-of-zenario-cms-v94
- https://github.com/anh91/Zenario-xss/issues/1
- https://panda002.hashnode.dev/a-stored-cross-site-scripting-xss-vulnerability-in-the-create-the-function-of-zenario-cms-v94