Cross-site Scripting in Zenario

MEDIUM 5.4CVE-2022-44070 · GHSA-f454-jm6x-56q6 · Published 16/11/2022 · updated 17/06/2026

In short

CVE-2022-44070 is a MEDIUM (CVSS 5.4) vulnerability affecting tribalsystems/zenario, zenario (tribalsystems).
Chance of exploitation in the next 30 days (EPSS): 0.48%, higher than 41.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tribalsystems/zenario Packagist	`≤ 9.3.57186`	No fix yet
zenario tribalsystems	`= 9.3.57186`	No fix yet

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via News articles.

NVD description

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via News articles.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≤ 9.3.57186

No fix yet

= 9.3.57186

No fix yet

More vulnerabilities in tribalsystems/zenario

See all →