CVE Catalog
CVE-2023-39578
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk0.38%
30th percentile - higher than 30% of all known CVEs
Summary
A stored cross-site scripting (XSS) vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field.
Risk Assessment
This vulnerability could lead to session hijacking or data theft, posing a significant security risk to the organization.
Recommendation
It is recommended to update Zenario CMS to the latest version and implement input validation in text fields to prevent script injections.
Original NVD description (English source)
A stored cross-site scripting (XSS) vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field.