In short
- CVE-2024-45960 is a MEDIUM (CVSS 4.8) vulnerability affecting tribalsystems/zenario, zenario (tribalsystems).
- Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 30.2% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
Zenario 9.7.61188 allows authenticated admin users to upload PDF files containing malicious code into the target system. If the PDF file is accessed through the website, it can trigger a Cross Site Scripting (XSS) attack.
NVD description
Zenario 9.7.61188 allows authenticated admin users to upload PDF files containing malicious code into the target system. If the PDF file is accessed through the website, it can trigger a Cross Site Scripting (XSS) attack.
More vulnerabilities in tribalsystems/zenario
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free