Security
فارسی
All products

tribalsystems/zenario

Composer · Package
22 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Zenario CMS vulnerable to CSRF CVE-2018-18420 · GHSA-22CQ-XXR9-JRRV tribalsystems/zenario Composer High No fix reported
Zenario uses Twig filters insecurely in the Twig Snippet pluginCVE-2024-34461 · GHSA-HR2R-W6WC-25PV tribalsystems/zenario Composer Critical Fix reported
Zenario's Tree Explorer tool from Organizer affected by Cross-site ScriptingCVE-2024-34460 · GHSA-7QWJ-GCJF-828F tribalsystems/zenario Composer Medium Fix reported
Zenario Cross Site Scripting in the Image libraryCVE-2024-45964 · GHSA-2CC5-429X-P387 tribalsystems/zenario Composer Low No fix reported
Zenario allows authenticated admin users to upload PDF files containing malicious codeCVE-2024-45960 · GHSA-3636-HX62-PV26 tribalsystems/zenario Composer Low No fix reported
File upload restriction bypass in Zenario CMSCVE-2022-23043 · GHSA-6R86-2JM9-9MH4 tribalsystems/zenario Composer High Fix reported
Zenario CMS Cross-site Scripting vulnerabilityCVE-2023-44770 · GHSA-MR4W-7VM9-CGQX tribalsystems/zenario Composer Medium No fix reported
Zenario CMS Cross-site Scripting vulnerabilityCVE-2023-44769 · GHSA-8G87-73VQ-443P tribalsystems/zenario Composer Medium No fix reported
Cross-site Scripting in ZenarioCVE-2022-44073 · GHSA-GMF5-Q34V-VWVP tribalsystems/zenario Composer Medium No fix reported
SQL Injection in Zenario 7.1-7.6CVE-2018-5960 · GHSA-JF5F-H3WR-J666 tribalsystems/zenario Composer High No fix reported
SQL Injection in tribalsystems/zenario CVE-2021-26830 · GHSA-W4F3-7F7C-X652 tribalsystems/zenario Composer Critical Fix reported
reflected XSS in tribalsystems/zenarioCVE-2021-27673 · GHSA-8HCM-JJ4X-4GMR tribalsystems/zenario Composer Medium Fix reported
Zenario CMS Cross-site Scripting vulnerabilityCVE-2023-44771 · GHSA-6CXV-27R2-FP3M tribalsystems/zenario Composer Medium No fix reported
Zenario CMS is vulnerable to Remote Code Execution (RCE).CVE-2022-44136 · GHSA-4P38-RC98-CR39 tribalsystems/zenario Composer Critical Fix reported
Cross-site Scripting in ZenarioCVE-2022-44069 · GHSA-R9XX-4CMV-856X tribalsystems/zenario Composer Medium No fix reported
Cross-site Scripting in ZenarioCVE-2022-44070 · GHSA-F454-JM6X-56Q6 tribalsystems/zenario Composer Medium No fix reported
Cross-site Scripting in ZenarioCVE-2022-44071 · GHSA-J43M-4PXC-HMQJ tribalsystems/zenario Composer Medium No fix reported
Tribal Systems Zenario CMS vulnerable to Session FixationCVE-2022-4231 · GHSA-6657-9743-4MC6 tribalsystems/zenario Composer Medium No fix reported
Unrestricted Upload of File with Dangerous Type in Zenario CMSCVE-2021-42171 · GHSA-RGG3-3WH7-W935 tribalsystems/zenario Composer Critical Fix reported
Cross-site Scripting in Zenario CMSCVE-2021-41952 · GHSA-X8WJ-CQMP-3WMM tribalsystems/zenario Composer Medium Fix reported