p PatchFirst

CVE-2023-44771

CVE-2023-44771

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Page Layout.

CVSS 5.4 · Medium · EPSS 0.6% · Public exploit

Published
Updated

Stack: php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • tribalsystems/zenario Packagist

    Versions
    • 7.5.40440
    • 7.5.41006
    • 7.5.41499
    • 7.5.41633
    • 7.5.42085
    • 7.5.42990
    • 7.5.47180
    • 7.6.41504
    • 7.6.41633
    • 7.6.42085
    • 7.6.42990
    • 7.6.47180
    • 7.7.42682
    • 7.7.42963
    • 7.7.42990
    • 7.7.44223
    • 7.7.47180
    • 7.7.47369
    • 7.7.48583
    • 8.0.44237
    • 8.0.44273
    • 8.0.44294
    • 8.0.44521
    • 8.0.45032
    • 8.0.45250
    • 8.0.45529
    • 8.0.47180
    • 8.0.48583
    • 8.1.45530
    • 8.1.45698
    • 8.1.46089
    • 8.1.46433
    • 8.1.46615
    • 8.1.47180
    • 8.1.47369
    • 8.1.48583
    • 8.2.46436
    • 8.2.46614
    • 8.2.47180
    • 8.2.47369
    • 8.2.47992
    • 8.2.48583
    • 8.3.47997
    • 8.3.48583
    • 8.3.50564
    • 8.4.50565
    • 8.4.51340
    • 8.5.50567
    • 8.5.50837
    • 8.5.51340
    • 8.6.51342
    • 8.7
    • 8.8
    • 8.8.53370
    • 8.8.53725
    • 8.8.54063
    • 8.9.54063
    • 8.9.54149
    • 8.9.54153
    • 8.9.55141
    • 9.0.54156
    • 9.0.55141
    • 9.0.57473
    • 9.1.55143
    • 9.1.55510
    • 9.1.55619
    • 9.1.57473
    • 9.2
    • 9.2.55826
    • 9.2.57169
    • 9.2.57473
    • 9.3.57186
    • 9.3.57474
    • 9.3.57595
    • 9.3.57709
    • 9.3.57754
    • 9.3.58670
    • 9.4.58686
    • 9.4.59197
    Affected ranges
    • ECOSYSTEM: ≤ 9.4.59197

    No fix published

Original sources

Check your server →