Skip to contentTribalsystems Zenario vulnerabilities
- tribalsystems zenarioZenario Cross Site Scripting in the Image libraryCVE-2024-459644.8 Medium
- tribalsystems zenarioZenario allows authenticated admin users to upload PDF files containing malicious codeCVE-2024-459604.8 Medium
- tribalsystems zenarioZenario uses Twig filters insecurely in the Twig Snippet pluginCVE-2024-34461Fix available9.8 Critical
- tribalsystems zenarioZenario CMS Cross-site Scripting vulnerabilityCVE-2023-44769Public exploit5.4 Medium
- tribalsystems zenarioZenario CMS Cross-site Scripting vulnerabilityCVE-2023-44771Public exploit5.4 Medium
- tribalsystems zenarioZenario CMS Cross-site Scripting vulnerabilityCVE-2023-44770Public exploit5.4 Medium
- tribalsystems zenarioA stored cross-site scripting (XSS) vulnerability in the Create function of Zenario CMS v9.4...CVE-2023-395784.8 Medium
- tribalsystems zenarioZenario CMS is vulnerable to Remote Code Execution (RCE).CVE-2022-44136Public exploitFix available9.8 Critical
- tribal systems zenario cms, tribalsystems zenario +1 moreTribal Systems Zenario CMS Remember Me session fixiationCVE-2022-42314.2 Medium
- tribalsystems zenarioCross-site Scripting in ZenarioCVE-2022-440735.4 Medium
- tribalsystems zenarioCross-site Scripting in ZenarioCVE-2022-440715.4 Medium
- tribalsystems zenarioCross-site Scripting in ZenarioCVE-2022-440705.4 Medium
- tribalsystems zenarioCross-site Scripting in ZenarioCVE-2022-440695.4 Medium
- tribal systems zenario cms, tribalsystems zenario +1 moreTribal Systems Zenario CMS Error Log Module admin_organizer.js cross site scriptingCVE-2020-36608Fix available3.5 Low
- tribalsystems zenarioCross-site Scripting in Zenario CMSCVE-2021-41952Fix available4.8 Medium
- tribalsystems zenarioUnrestricted Upload of File with Dangerous Type in Zenario CMSCVE-2021-42171Public exploitFix available7.2 High
- tribal systems zenario cms, tribalsystems zenario +1 moreFile upload restriction bypass in Zenario CMSCVE-2022-23043Fix available7.2 High
- tribalsystems zenarioSQL Injection in tribalsystems/zenarioCVE-2021-26830Public exploitFix available9.1 Critical
- tribalsystems zenarioreflected XSS in tribalsystems/zenarioCVE-2021-27673Fix available4.8 Medium
- tribalsystems zenarioSQL Injection in tribalsystems/zenarioCVE-2021-27672Fix available4.9 Medium
- tribalsystems zenarioZenario CMS vulnerable to CSRFCVE-2018-18420Fix available8.8 High
- tribalsystems zenarioSQL Injection in Zenario 7.1-7.6CVE-2018-59608.8 High