HIGH8.8Packagist
GHSA-22cq-xxr9-jrrv· CVE-2018-18420Zenario CMS vulnerable to CSRF
Modified: 9/10/2026
package
Packagist/tribalsystems/zenario
pkg:packagist/tribalsystems/zenario
MEDIUM5.4Packagist
GHSA-2cc5-429x-p387· CVE-2024-45964Zenario Cross Site Scripting in the Image library
Modified: 10/2/2024
MEDIUM4.8Packagist
GHSA-3636-hx62-pv26· CVE-2024-45960Zenario allows authenticated admin users to upload PDF files containing malicious code
Modified: 10/2/2024
CRITICAL9.8Packagist
GHSA-4p38-rc98-cr39· CVE-2022-44136Zenario CMS is vulnerable to Remote Code Execution (RCE).
Modified: 11/8/2023
MEDIUM5.4Packagist
GHSA-6657-9743-4mc6· CVE-2022-4231Tribal Systems Zenario CMS vulnerable to Session Fixation
Modified: 11/8/2023
MEDIUM5.4Packagist
GHSA-6cxv-27r2-fp3m· CVE-2023-44771Zenario CMS Cross-site Scripting vulnerability
Modified: 2/16/2024
HIGH7.2Packagist
GHSA-6r86-2jm9-9mh4· CVE-2022-23043File upload restriction bypass in Zenario CMS
Modified: 2/19/2024
MEDIUM6.5Packagist
GHSA-7qwj-gcjf-828f· CVE-2024-34460Zenario's Tree Explorer tool from Organizer affected by Cross-site Scripting
Modified: 11/16/2024
MEDIUM5.4Packagist
GHSA-8g87-73vq-443p· CVE-2023-44769Zenario CMS Cross-site Scripting vulnerability
Modified: 2/16/2024
MEDIUM4.8Packagist
GHSA-8hcm-jj4x-4gmr· CVE-2021-27673reflected XSS in tribalsystems/zenario
Modified: 2/16/2024
MEDIUM5.4Packagist
GHSA-f454-jm6x-56q6· CVE-2022-44070Cross-site Scripting in Zenario
Modified: 11/8/2023
MEDIUM6.1Packagist
GHSA-f92p-f8r2-c87q· CVE-2020-36608Tribal Systems Zenario CMS vulnerable to Cross-site Scripting
Modified: 11/8/2023
MEDIUM5.4Packagist
GHSA-gmf5-q34v-vwvp· CVE-2022-44073Cross-site Scripting in Zenario
Modified: 2/16/2024
MEDIUM4.9Packagist
GHSA-gxcm-36qw-j29v· CVE-2021-27672SQL Injection in tribalsystems/zenario
Modified: 11/8/2023
CRITICAL9.8Packagist
GHSA-hr2r-w6wc-25pv· CVE-2024-34461Zenario uses Twig filters insecurely in the Twig Snippet plugin
Modified: 3/31/2025
MEDIUM5.4Packagist
GHSA-j43m-4pxc-hmqj· CVE-2022-44071Cross-site Scripting in Zenario
Modified: 11/8/2023
HIGH8.8Packagist
GHSA-jf5f-h3wr-j666· CVE-2018-5960SQL Injection in Zenario 7.1-7.6
Modified: 2/16/2024
MEDIUM5.4Packagist
GHSA-mr4w-7vm9-cgqx· CVE-2023-44770Zenario CMS Cross-site Scripting vulnerability
Modified: 2/16/2024
MEDIUM5.4Packagist
GHSA-r9xx-4cmv-856x· CVE-2022-44069Cross-site Scripting in Zenario
Modified: 11/8/2023
CRITICAL9.8Packagist
GHSA-rgg3-3wh7-w935· CVE-2021-42171Unrestricted Upload of File with Dangerous Type in Zenario CMS
Modified: 11/8/2023
CRITICAL9.1Packagist
GHSA-w4f3-7f7c-x652· CVE-2021-26830SQL Injection in tribalsystems/zenario
Modified: 2/16/2024
MEDIUM4.8Packagist
GHSA-x8wj-cqmp-3wmm· CVE-2021-41952Cross-site Scripting in Zenario CMS
Modified: 11/8/2023