PT-2023-29293 · Unknown · Zenario Cms

·

CVE-2023-44770

·

Publicado

2023-10-06

·

Atualizado

2023-10-06

CVSS v3.1

5.4

Média

VetorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Zenario CMS version 9.4.59197
Description A Cross-Site Scripting (XSS) issue allows an attacker to execute arbitrary code via a crafted script to the Organizer - Spare alias. This enables the attacker to perform unauthorized actions on the system.
Recommendations For Zenario CMS version 9.4.59197, as a temporary workaround, consider restricting access to the Organizer - Spare alias until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-44770
GHSA-MR4W-7VM9-CGQX

Produtos afetados

Zenario Cms