tribalsystems/zenario Security Advisories for 9.4.58686 (7)
-
[LOW] Zenario Cross Site Scripting in the Image library
PKSA-626r-ptwv-5msz CVE-2024-45964 GHSA-2cc5-429x-p387
Affected version: <=9.7.61188
Reported by:
GitHub -
[LOW] Zenario allows authenticated admin users to upload PDF files containing malicious code
PKSA-jm4c-kd3j-5hgr CVE-2024-45960 GHSA-3636-hx62-pv26
Affected version: <=9.7.61188
Reported by:
GitHub -
[MEDIUM] Zenario uses Twig filters insecurely in the Twig Snippet plugin
PKSA-2vff-jckp-41b9 CVE-2024-34461 GHSA-hr2r-w6wc-25pv
Affected version: <9.5.60437
Reported by:
GitHub -
[MEDIUM] Zenario's Tree Explorer tool from Organizer affected by Cross-site Scripting
PKSA-7y52-wyc4-jh5d CVE-2024-34460 GHSA-7qwj-gcjf-828f
Affected version: <9.5.60602
Reported by:
GitHub -
[MEDIUM] Zenario CMS Cross-site Scripting vulnerability
PKSA-sgtd-47vh-v7xk CVE-2023-44769 GHSA-8g87-73vq-443p
Affected version: <=9.4.59197
Reported by:
GitHub -
[MEDIUM] Zenario CMS Cross-site Scripting vulnerability
PKSA-wj4z-2892-4z7j CVE-2023-44771 GHSA-6cxv-27r2-fp3m
Affected version: <=9.4.59197
Reported by:
GitHub -
[MEDIUM] Zenario CMS Cross-site Scripting vulnerability
PKSA-1xsc-5sr6-rvqw CVE-2023-44770 GHSA-mr4w-7vm9-cgqx
Affected version: <=9.4.59197
Reported by:
GitHub