MEDIUM6.1

GHSA-f92p-f8r2-c87q

Tribal Systems Zenario CMS vulnerable to Cross-site Scripting

Quick fix

GHSA-f92p-f8r2-c87q — tribalsystems/zenario: upgrade to the fixed version with the command below.

composer require tribalsystems/zenario:^8.5.51340

Details

A vulnerability has been found in Tribal Systems Zenario CMS prior to version 8.5.51340. Affected by this issue is some unknown functionality of the file `admin_organizer.js` of the component `Error Log Module`. The manipulation leads to cross site scripting. The attack may be launched remotely. The issue is patched in version 8.5.51340.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/tribalsystems/zenario

Introduced in: 0Fixed in: 8.5.51340

Fixcomposer require tribalsystems/zenario:^8.5.51340

References

https://nvd.nist.gov/vuln/detail/CVE-2020-36608[ADVISORY]
https://github.com/TribalSystems/Zenario/commit/dfd0afacb26c3682a847bea7b49ea440b63f3baa[WEB]
https://github.com/TribalSystems/Zenario[PACKAGE]
https://vuldb.com/?id.212816[WEB]