Non évaluée
Zenario CMS 9.0.54156 is vulnerable to Cross Site Scripting (XSS) via upload file to *.SVG. An attacker can send malicious files to victims and steals...
CVE-2021-41952
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Zenario CMS 9.0.54156 is vulnerable to Cross Site Scripting (XSS) via upload file to *.SVG. An attacker can send malicious files to victims and steals victim's cookie leads to account takeover. The person viewing the image of a contact can be victim of XSS.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- report github.com