Zenario Cross Site Scripting in the Image library

MEDIUM 4.8CVE-2024-45964 · GHSA-2cc5-429x-p387 · Published 02/10/2024 · updated 17/06/2026

In short

CVE-2024-45964 is a MEDIUM (CVSS 4.8) vulnerability affecting tribalsystems/zenario, zenario (tribalsystems).
Chance of exploitation in the next 30 days (EPSS): 0.37%, higher than 30.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tribalsystems/zenario Packagist	`≤ 9.7.61188`	No fix yet
zenario tribalsystems	`= 9.7.61188`	No fix yet

Zenario 9.7.61188 is vulnerable to Cross Site Scripting (XSS) in the Image library via the "Organizer tags" field.

NVD description

Zenario 9.7.61188 is vulnerable to Cross Site Scripting (XSS) in the Image library via the "Organizer tags" field.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≤ 9.7.61188

No fix yet

= 9.7.61188

No fix yet

More vulnerabilities in tribalsystems/zenario

See all →